Principal Security Engineer (Palo Alto Strata Cloud)

Navy Federal Credit Union is seeking a Principal Security Engineer to maintain and support the Palo Alto Prisma Access environment using Strata Cloud Manager and strategies to ensure the cybersecurity posture of the systems is scalable and effective across the organization. Additionally, this position will provide cybersecurity engineering support to research, evaluate, design, implement, and maintain system and product solutions, applying knowledge of engineering principles. To provide technical direction and engineering support for projects and infrastructure. Develop and maintain expert functional knowledge of evolving IT engineering industry technologies/competition, concepts, and trends.Navy Federal provides much more than a job. We provide a meaningful career experience, including a culture that is energized, engaged and committed; and fierce appreciation for our teams, who are rewarded with highly competitive pay and generous benefits and perks.Our approach to careers is simple yet powerful: Make our mission your passion.FORTUNE100 Best Companies to Work For 2025Yello and WayUp Top 100 Internship ProgramsComputerworld Best Places to Work in ITNewsweek Most Loved Workplaces2025 PEOPLE Companies That CareNewsweek Most Trustworthy Companies in AmericaMilitary Times 2025 Best for Vets EmployersBest Companies for Latinos to Work for 2025Forbes 2025 America’s Best Large EmployersForbes 2025 America's Best Employers for New GradsForbes 2025 America's Best Employers for Tech Workers2025 RippleMatch Campus Forward Award Winner for Overall Excellence Military.com Top Military Spouse Employers 2025 2025 Handshake Early Talent AwardFrom Fortune. 2025 Fortune Media IP Limited. All rights reserved. Used under license. Fortune and Fortune Media IP Limited are not affiliated with, and do not endorse products or services of, Navy Federal Credit Union.Equal Employment Opportunity: All qualified applicants will receive consideration for employment without regard to age, race, sex, color, religion, national origin, disability, veteran status, pregnancy, sexual orientation, genetic information, gender identity or any other basis protected by applicable law.Accommodations: If you need accommodation or assistance for a qualifying condition to complete the online application (or during any stage of the hiring process), you can contact Navy Federal's Medical Accommodations team at View email address on click.appcast.io or by calling View phone number on click.appcast.io. This team cannot provide any information on job postings or application status.Disclaimers: Navy Federal reserves the right to fill this role at a higher/lower grade level based on business need. An assessment may be required to compete for this position. Job postings are subject to close early or extend out longer than the anticipated closing date at the hiring team’s discretion based on qualified applicant volume. Navy Federal Credit Union assesses market data to establish salary ranges that enable us to remain competitive. You are paid within the salary range, based on your experience, location and market position. For additional details regarding compensation and benefits, review the Benefits page of the Navy Federal Career Site.Protect Yourself from Job Scams: Navy Federal Credit Union jobs are posted on our career site, jobs.navyfederal.org and reputable job boards (e.g., LinkedIn, Indeed). We do not post jobs on social media marketplaces, messaging apps or unverified websites. We will never ask candidates for payment, bank details or personal financial information during the hiring process.Bank Secrecy Act: Remains cognizant of and adheres to Navy Federal policies and procedures, and regulations pertaining to the Bank Secrecy Act.Bachelor's Degree in Computer Science, Information Technology or the equivalent combination of training, education, and experience.At least 10+ years of total experience in cybersecurity engineering, on premise and cloud architectures, proxy management, cloud governance and security controls.At least 5+ years of direct hands-on experience in Palo Alto Strata Cloud Manager/Panorama and similar leading technology. At least 3+ years of direct hands-on experience in tuning network sensors like IDS/IPS, DDOS, Cloud Security services.Domain expertise of network security sensors such as IDS, cloud access security broker (CASB), Virtual Network security, DDOS protections, DNS, etc.Detail understanding of Virtual Network Technologies Routers, switches, Load Balancers, firewalls, proxy, etc.Desired QualificationsGood understanding and exposure to Cloud standards, architecture and models.Detail proficiency with Linux (or similar) operating systems.In depth understanding of TCP/UDP/ICMP/IP protocols.PowerShell and Python experience.Experience with Splunk.Experience with PKI, SSL, SSH, etc.Experience with industry leading firewalls, proxy and load balancing solutions.Experience with network security concepts and principles.Experience with Server and endpoint operating system security.Experience with Azure cloud, Cloud Proxy, SASE, SD-WAN, Web Isolation, Zero Trust Network AccessCISSP, CCNP Security Certification, or other relevant Palo Alto Certifications.Additional InformationHours:Monday - Friday, 8:00AM - 4:30PMLocation:820 Follin Lane, Vienna, VA 221805510 Heritage Oaks Drive, Pensacola, FL 32526141 Security Drive, Winchester, VA 22602Remain available for on-call support for major outage issue related to the Palo Alto Strata Cloud Manager.Highly proficient on the architecture, design, and deployment of Palo Alto Strata Cloud Manager product.Maintain Palo Alto Prisma Access environment using Strata Cloud Manager.Integration development of the Prisma Access with other cyber security solutions. Functions as a liaison between Navy Federal Credit Union and Palo Alto Support.Engage in technical design of solutions based on use cases and business requirements.Participate in proof of concepts and other technical evaluations of technologies, designs and solutions and provide recommendations.Stay abreast of emerging technologies and threats proactively assess and evaluate the adoption thereof into the organization.Supporting the development of cybersecurity requirements, design & architecture artifacts, plans and policies.Supporting defining security development and test efforts implementation of security controls of networking devices, databases, operating systems and hardware and software components.Understanding and integrating cybersecurity development activities.Performing analysis on cybersecurity data and test results.Be part of team that design, protects and manages, security services for companies’ global security infrastructure.Able to demonstrate strong written, oral and presentation skills with the ability to discuss highly technical concepts to all audiences, ranging from non-technical people to executive level technical decision-makers.Able to listen and collaborate with audiences ranging from IT administrators to executive level stakeholders to understand their requirements and position our tools to fulfill those requirements.Demonstrates the ability to confidently lead discussions on engineering solutions and provide clear, strategic recommendations on solutions and direction.Must be self-motivated and self-educating, yet willing and able to work collaboratively.Full timePosting Date: 2026-07-29