Staff Network Engineer

US-CA-Menlo Park · Remotefull timeRemote

Apply on Employer Site

senior

$160k–$210k

H1B: yes

Snowflake Staff Network Engineer at Snowflake responsible for leading design, operation, and optimization of Zscaler Zero Trust and secure-access platform. Role includes managing multi-cloud network stack and troubleshooting complex connectivity issues.

Responsibilities

Own and operate the Zscaler platform (ZIA, ZPA, ZDX, ZCC) end-to-end, including policy frameworks, app-segmentation models, PAC/traffic-forwarding standards, App Connector topology, and NSS/log-streaming design.
Troubleshoot secure-access incidents like tunnel flapping, broker/connector health, SSL inspection edge cases, DNS/DTLS failures, and lead root-cause analysis for systemic issues.
Manage Palo Alto firewalls, Panorama and GlobalProtect VPN, while planning migration toward Zscaler solutions.
Support Aruba (Central) Wireless, Ekahau and Cisco Catalyst switches globally.
Design, install, and configure network devices and ISP circuits at new offices.
Build automation and observability: leverage log analytics (we run our network telemetry through Snowflake) to create dashboards, alerting, and proactive detection.
Troubleshoot secure Network constructs in AWS, Azure, and GCP such as NVAs, NSG, VPC, UDR, DirectConnect, ExpressRoute.
Author technical runbooks, escalation procedures, and knowledge-base content.
Participate in on-call rotations for the changes and lead responses to major network incidents.
Be able to travel internationally for short periods of time for site builds.
What You'll Bring
At least 10 years of enterprise network infrastructure experience, including 3+ years of hands-on Zscaler ZIA/ZPA design and deployment at scale.

Qualification

Expertise in ZTNAHands-on Palo Alto (PAN-OSCertificationsSnowflake is growing fastHow do you want to make your impact?For jobs located in the United States

Required

At least 10 years of enterprise network infrastructure experience
3+ years of hands-on Zscaler ZIA/ZPA design and deployment at scale
Recognized depth in Zero Trust / SASE architecture
Expertise in ZTNA, proxy/SWG, SSL inspection, and cloud security
Hands-on Palo Alto (PAN-OS, GlobalProtect, Panorama) and enterprise VPN experience
Experience with Aruba wireless and Cisco LAN/WAN (routing, switching, 802.1x)

Preferred

Certifications: Zscaler (ZCCA-IA/PA, ZDTA), Palo Alto (PCNSE), Aruba (ACMA/ACMP), or Cisco (CCNA/CCNP).
Experience migrating legacy VPNs (GlobalProtect) to ZPA.
Familiarity with SASE and network-as-code/IaC (Terraform).
Experience operating in high-growth SaaS or cloud-native environments.
Snowflake is growing fast, and we’re scaling our team to help enable and accelerate our growth. We are looking for people who share our values, challenge ordinary thinking, and push the pace of innovation while building a future for themselves and Snowflake.
How do you want to make your impact?
For jobs located in the United States, please visit the job posting on the Snowflake Careers Site for salary and benefits information: careers.snowflake.com