Principal Security Engineer (Palo Alto Strata Cloud)

Overview

Navy Federal Credit Union is seeking a Principal Security Engineer to maintain and support the Palo Alto Prisma Access environment using Strata Cloud Manager and strategies to ensure the cybersecurity posture of the systems is scalable and effective across the organization. Additionally, this position will provide cybersecurity engineering support to research, evaluate, design, implement, and maintain system and product solutions, applying knowledge of engineering principles. To provide technical direction and engineering support for projects and infrastructure. Develop and maintain expert functional knowledge of evolving IT engineering industry technologies/competition, concepts, and trends.

Responsibilities

• Remain available for on-call support for major outage issue related to the Palo Alto Strata Cloud Manager.

• Highly proficient on the architecture, design, and deployment of Palo Alto Strata Cloud Manager product.

• Maintain Palo Alto Prisma Access environment using Strata Cloud Manager.

• Integration development of the Prisma Access with other cyber security solutions.

• Functions as a liaison between Navy Federal Credit Union and Palo Alto Support.

• Engage in technical design of solutions based on use cases and business requirements.

• Participate in proof of concepts and other technical evaluations of technologies, designs and solutions and provide recommendations.

• Stay abreast of emerging technologies and threats proactively assess and evaluate the adoption thereof into the organization.

• Supporting the development of cybersecurity requirements, design & architecture artifacts, plans and policies.

• Supporting defining security development and test efforts implementation of security controls of networking devices, databases, operating systems and hardware and software components.

• Understanding and integrating cybersecurity development activities.

• Performing analysis on cybersecurity data and test results.

• Be part of team that design, protects and manages, security services for companies’ global security infrastructure.

• Able to demonstrate strong written, oral and presentation skills with the ability to discuss highly technical concepts to all audiences, ranging from non-technical people to executive level technical decision-makers.

• Able to listen and collaborate with audiences ranging from IT administrators to executive level stakeholders to understand their requirements and position our tools to fulfill those requirements.

• Demonstrates the ability to confidently lead discussions on engineering solutions and provide clear, strategic recommendations on solutions and direction.

• Must be self-motivated and self-educating, yet willing and able to work collaboratively.

Qualifications

• Bachelor's Degree in Computer Science, Information Technology or the equivalent combination of training, education, and experience.

• At least 10+ years of total experience in cybersecurity engineering, on premise and cloud architectures, proxy management, cloud governance and security controls.

• At least 5+ years of direct hands-on experience in Palo Alto Strata Cloud Manager/Panorama and similar leading technology.

• At least 3+ years of direct hands-on experience in tuning network sensors like IDS/IPS, DDOS, Cloud Security services.

• Domain expertise of network security sensors such as IDS, cloud access security broker (CASB), Virtual Network security, DDOS protections, DNS, etc.

• Detail understanding of Virtual Network Technologies Routers, switches, Load Balancers, firewalls, proxy, etc.

Desired Qualifications

• Good understanding and exposure to Cloud standards, architecture and models.

• Detail proficiency with Linux (or similar) operating systems.

• In depth understanding of TCP/UDP/ICMP/IP protocols.

• PowerShell and Python experience.

• Experience with Splunk.

• Experience with PKI, SSL, SSH, etc.

• Experience with industry leading firewalls, proxy and load balancing solutions.

• Experience with network security concepts and principles.

• Experience with Server and endpoint operating system security.

• Experience with Azure cloud, Cloud Proxy, SASE, SD-WAN, Web Isolation, Zero Trust Network Access

• CISSP, CCNP Security Certification, or other relevant Palo Alto Certifications.

Additional Information

Hours:

• Monday - Friday, 8:00AM - 4:30PM

Location:

• 820 Follin Lane, Vienna, VA 22180

• 5510 Heritage Oaks Drive, Pensacola, FL 32526

• 141 Security Drive, Winchester, VA 22602

About Us

Navy Federal provides much more than a job. We provide a meaningful career experience, including a culture that is energized, engaged and committed; and fierce appreciation for our teams, who are rewarded with highly competitive pay and generous benefits and perks.

Our approach to careers is simple yet powerful: Make our mission your passion.

• FORTUNE 100 Best Companies to Work For® 2026

• Yello and WayUp Top 100 Internship Programs 2025

• Computerworld® Best Places to Work in IT 2026

• Most Loved Workplace – America’s Top Most Loved Workplaces® 2025

• 2025 PEOPLE® Companies That Care

• Newsweek Most Trustworthy Companies in America 2026

• Military Times 2025 Best for Vets Employers

• Forbes® 2026 America's Best Large Employers

• Forbes® 2025 America's Best Employers for New Grads

• Forbes® 2025 America's Best Employers for Tech Workers

• 2025 RippleMatch Campus Forward Award Winner for Overall Excellence

• Military.com Top Military Spouse Employers 2025

• 2026 Handshake Early Talent Award

• Newsweek America’s Greatest Workplaces for Culture, Belonging and Community 2026

From Fortune Magazine. © 2026 Fortune Media IP Limited. All rights reserved. Used under license. Fortune and Fortune 100 Best Companies to Work For are registered trademarks of Fortune Media IP Limited and are used under license. Fortune Magazine, Fortune Media (USA) Corporation, and its affiliates are not affiliated with, and do not endorse products or services of, Navy Federal Credit Union.

Equal Employment Opportunity: All qualified applicants will receive consideration for employment without regard to age, race, sex, color, religion, national origin, disability, veteran status, pregnancy, sexual orientation, genetic information, gender identity or any other basis protected by applicable law.

Accommodations: If you need accommodation or assistance for a qualifying condition to complete the online application (or during any stage of the hiring process), you can contact Navy Federal's Medical Accommodations team at View email address on click.appcast.io or by calling View phone number on click.appcast.io. This team cannot provide any information on job postings or application status.

Disclaimers: Navy Federal reserves the right to fill this role at a higher/lower grade level based on business need. An assessment may be required to compete for this position. Job postings are subject to close early or extend out longer than the anticipated closing date at the hiring team’s discretion based on qualified applicant volume. Navy Federal Credit Union assesses market data to establish salary ranges that enable us to remain competitive. You are paid within the salary range, based on your experience, location and market position. For additional details regarding compensation and benefits, review the Benefits page ( of the Navy Federal Career Site.

Protect Yourself from Job Scams: Navy Federal Credit Union jobs are posted on our career site, jobs.navyfederal.org and reputable job boards (e.g., LinkedIn, Indeed). We do not post jobs on social media marketplaces, messaging apps or unverified websites. We will never ask candidates for payment, bank details or personal financial information during the hiring process.

Bank Secrecy Act: Remains cognizant of and adheres to Navy Federal policies and procedures, and regulations pertaining to the Bank Secrecy Act. REQNUMBER: 30362