Principal Engineer Software - NGFW (NetSec) - Bangalore
Palo Alto Networks3 days ago
Bengaluru, IndiaStaff+
Responsibilities
- Own PA-VM platform health across the UEFI boot path, Linux process supervision, firewall data plane, and HA/VPN control-plane daemons.
- Debug regressions across private and public cloud hypervisors and x86_64 and ARM64 architectures.
- Design and maintain Docker-based cross-architecture build environments and operate CI/CD pipelines for multiple release trains.
- Design HA and VPN subsystem improvements for on-premises and cloud-native environments.
- Instrument the platform with telemetry, structured logging, automated crash-dump collection, and quality dashboards.
- Mentor engineers, lead architecture reviews, drive code-quality standards, and run blameless post-mortems for P1 escapes.
- Collaborate with QA, Release Engineering, and Product Management to ship fixes safely.
Requirements
- 10+ years of hands-on systems engineering experience on Linux-based appliances or virtualized platforms.
- Deep Linux systems expertise including boot/init flow, process supervisors, journald, cgroups, and core dumps.
- Hands-on experience with KVM, ESXi, AWS Nitro, and GCP KVM hypervisors.
- Proficiency with x86_64 and ARM64 platforms, including ARM-specific debugging.
- Working knowledge of HA stateful failover, cloud-native HA patterns, IPsec, SSL VPN, IKEv1/IKEv2 state machines, and cryptographic agility.
- Proficiency with Docker-based build environments, multi-architecture manifests, hermetic builds, and CI/CD tooling.
- Experience with image-format conversion, marketplace publishing automation, and observability using Prometheus, Grafana, or OpenTelemetry.
- Senior or Staff-level leadership in architecture review, mentorship, and code-quality standards.
- Preferred: experience shipping firewall, VPN, SASE, or SD-WAN products; kernel programming with netfilter, XFRM, or cryptodev; contributions to KVM, QEMU, libvirt, or systemd; FIPS 140-2 or FIPS 140-3 certification processes; active release trains with hot-patch or zero-downtime upgrades; GRE/VXLAN/Geneve, BGP, OSPF, and modern routing stacks; and Rust or Go alongside C/C++ and Python.
Benefits
- The role is based in Bangalore and most teams work from the office full time, with flexibility when needed.
- Palo Alto Networks provides reasonable accommodations for qualified individuals with disabilities or special needs.
- Palo Alto Networks is an equal opportunity employer.
Tech Stack
Categories
About Palo Alto Networks
Palo Alto Networks builds cybersecurity products for enterprises and governments, including next-generation firewalls, cloud security (Prisma Cloud/Prisma Access), and SOC tools (Cortex). It sells subscriptions and appliances with cloud-delivered threat intelligence, securing networks, endpoints, and applications across data centers and public clouds. Founded in 2005 and headquartered in Santa Clara, California, the company is publicly traded on the NYSE under the ticker PANW.