Principal Engineer Software (Network Securitiy/SASE) - NetSec

Job Summary The Team Engineering - Our Engineering team is at the core of our products and solutions, building the next-generation technologies that protect our digital way of life. We thrive on innovation and complex problem-solving, collaborating across teams to deliver highly scalable, secure, and performant systems. Job Summary As a Principal Engineer in our SASE group, you will be a key leader in designing, developing, and delivering next-generation technologies for our SD-WAN team. You will be part of a world-class engineering team working on groundbreaking technologies and solving complex problems. We are seeking a passionate leader who takes ownership, brings new ideas to software development, and thrives in a collaborative, fast-paced environment. Key Responsibilities Implement URL filtering, anti-malware, SSL/TLS decryption, and Cloud Access Security Brokers for secure Direct Internet Access. Work with 802.1X, RADIUS/TACACS+, and Identity Providers (Id Ps) for authentication. Manage IPsec tunnels and public key infrastructure (PKI). Wrap and parse packets for VXLAN, GENEVE, GRE, and IPsec. Perform Deep Packet Inspection (DPI) including stream reassembly and Layer 7 Application Identification (App ID). Design, develop, and implement highly scalable software features for our SD-WAN solution. Architect and implement large-scale distributed systems, ensuring high availability and performance. Lead database design and implementation for custom use cases, including graph, time-series, and in-memory databases. Proactively collaborate with development and quality assurance teams to achieve the best product quality. Work closely with Dev Ops and Technical Support teams to troubleshoot and resolve complex customer issues. Suggest and implement improvements to the software development lifecycle and team processes. Mentor and coach junior team members, fostering a culture of technical excellence and applied learning. Qualifications Required Qualifications M.E./B.E. degree in Computer Science/Engineering or equivalent experience. 9+ years of professional software development experience. Experience implementing URL filtering, anti-malware, SSL/TLS decryption, and Cloud Access Security Brokers. Experience working with 802.1X, RADIUS/TACACS+, and Identity Providers (Id Ps) for authentication. Experience managing IPsec tunnels and public key infrastructure (PKI). Proficiency in packet wrapping and parsing for VXLAN, GENEVE, GRE, and IPsec. Experience with Deep Packet Inspection (DPI), stream reassembly, and Layer 7 Application Identification. Extensive hands-on programming skills in C/C++, Python, and Go. Expertise in control plane, data plane, and security features of SD-WAN platforms, including multi-core/multi-process programming. Deep knowledge of Layer 2/3 networking and routing protocols such as BGP, OSPF, IPSec, Qo S, and NAT. Preferred Qualifications Experience with DPDK for high-performance network packet processing. Familiarity with machine learning concepts and their application. Experience with cloud platforms (AWS, Azure, GCE, Kubernetes) and virtualization technologies (ESXi, KVM, Hyper-V). Knowledge of application layer protocols (e.g., HTTP, SMTP, SIP) and TLS/SSL internals. Our Commitment We’re trailblazers that dream big, take risks, and challenge cybersecurity’s status quo. It’s simple: we can’t accomplish our mission without diverse teams innovating, together. We are committed to providing reasonable accommodations for all qualified individuals with a disability. If you require assistance or accommodation due to a disability or special need, please contact us at accommodations@paloaltonetworks.com. Palo Alto Networks is an equal opportunity employer. We celebrate diversity in our workplace, and all qualified applicants will receive consideration for employment without regard to age, ancestry, color, family or medical care leave, gender identity or expression, genetic information, marital status, medical condition, national origin, physical or mental disability, political affiliation, protected veteran status, race, religion, sex (including pregnancy), sexual orientation, or other legally protected characteristics. All your information will be kept confidential according to EEO guidelines. Is role eligible for Immigration Sponsorship? No. Please note that we will not sponsor applicants for work visas for this position. Please use this form to provide us with information that will help direct your request and find your data in all of our systems