Principal Security Engineer (Palo Alto Strata Cloud)

Benefits and culture

Navy Federal Credit Union offers a collaborative, growth‑minded environment with on‑site opportunities in Pensacola, Vienna and Winchester. The organization is recognized for its strong culture, trust, and employee development, underscoring a commitment to people and career progression.

• Fortune 100 Best Companies to Work For in 2026
• Yello and WayUp Top 100 Internship Programs 2025
• Computerworld Best Places to Work in IT 2026
• Most Loved Workplace – America’s Top Most Loved Workplaces 2025
• 2025 PEOPLE Companies That Care
• Newsweek Most Trustworthy Companies in America 2026
• Military Times 2025 Best for Vets Employers
• Forbes 2026 America's Best Large Employers
• Forbes 2025 America's Best Employers for New Grads
• Forbes 2025 America's Best Employers for Tech Workers
• 2025 RippleMatch Campus Forward Award Winner for Overall Excellence
• Military.com Top Military Spouse Employers 2025
• 2026 Handshake Early Talent Award
• Newsweek America’s Greatest Workplaces for Culture, Belonging and Community 2026

Responsibilities

• Provide on‑call support for major outages related to the Palo Alto Strata Cloud Manager.
• Demonstrate deep expertise in the architecture, design and deployment of Palo Alto Strata Cloud Manager products.
• Maintain the Prisma Access environment using Strata Cloud Manager.
• Develop integrations of Prisma Access with other cybersecurity solutions.
• Serve as a liaison between Navy Federal Credit Union and Palo Alto Support.
• Contribute to technical design discussions based on use cases and business requirements.
• Participate in proof of concepts and technical evaluations, providing recommendations.
• Stay current with emerging technologies and threats, evaluating adoption into the organization.
• Support the development of cybersecurity requirements, design artifacts, plans and policies.
• Assist with security development and testing efforts, implementing controls across networking devices, databases, operating systems and hardware and software components.
• Integrate cybersecurity development activities into projects and initiatives.
• Analyze cybersecurity data and test results to drive improvements.
• Be part of a team that designs, protects and manages security services for global security infrastructure.
• Communicate complex technical concepts clearly to audiences ranging from IT administrators to executive decision‑makers.
• Collaborate with stakeholders to understand requirements and align tools to meet those needs.
• Lead discussions on engineering solutions and offer clear, strategic guidance on direction.
• Demonstrate self‑motivation and a commitment to ongoing learning while working effectively in a team.

Requirements

• Bachelor's Degree in Computer Science, Information Technology or an equivalent combination of education and experience.
• 10+ years of cybersecurity engineering experience, including on‑premise and cloud architectures, proxy management, cloud governance and security controls.
• 5+ years of hands‑on experience with Palo Alto Strata Cloud Manager, Panorama or similar leading technology.
• 3+ years of hands‑on experience tuning network sensors such as IDS/IPS, DDOS protections and other cloud security services.
• Domain expertise in network security sensors including IDS, CASB, virtual network security, DDOS protections and DNS.
• Strong understanding of virtual network technologies, routers, switches, load balancers, firewalls and proxy systems.
• Solid knowledge of cloud standards, architecture and models.
• Proficiency with Linux or similar operating systems.
• In‑depth knowledge of TCP/UDP/ICMP/IP protocols.
• Experience with PowerShell and Python scripting.
• Experience with Splunk logging and analytics.
• Experience with PKI, SSL, SSH, HTTPS and related security protocols.
• Experience with industry leading firewalls, proxy and load balancing solutions.
• Strong understanding of network security concepts and principles.
• Experience with server and endpoint operating system security.
• Experience with Azure cloud services, Cloud Proxy, SASE, SD‑WAN, Web Isolation and Zero Trust Network Access.
• CISSP, CCNP Security or other relevant Palo Alto certifications.

Technologies

• Palo Alto Strata Cloud Manager
• Palo Alto Prisma Access
• Palo Alto Panorama
• Strata Cloud Manager
• Splunk
• Linux
• PowerShell
• Python
• Azure
• Cloud Proxy
• SASE
• SD‑WAN
• Web Isolation
• Zero Trust Network Access

Hours

Monday to Friday, 8:00 AM to 4:30 PM

Location

• 820 Follin Lane, Vienna, VA 22180
• 5510 Heritage Oaks Drive, Pensacola, FL 32526
• 141 Security Drive, Winchester, VA 22602