Principal Cybersecurity Engineer – Firewall Policy Implementation (Artificial Intelligence (AI) Experienced)

AT&T

Charlotte (NC)

On-site

USD 155,000 - 261,000

Full time

2 days ago

Be an early applicant

Application generator

Get a reply from this employer — a resume and cover letter tailored to exactly what they’re hiring for.

Get past ATS filters

Benefits offered by this job

Medical/Dental/Vision coverage

401(k) plan

Tuition reimbursement

Paid Time Off and Holidays

Paid Parental Leave

Employee wellness programs

Employee discounts

Job summary

AT&T is seeking a Principal Cybersecurity Engineer (Firewall Policy Implementation) to lead hands-on firewall policy operations at a large-scale enterprise. This onsite role requires deep expertise in firewall platforms, policy management, and AI-assisted automation, with mentored ramp-up and eventual on-call participation.

The candidate will optimize rule sets, drive policy lifecycle efficiency, and collaborate across IT, network, and security teams to deliver secure, compliant outcomes.

Qualifications

7+ years’ experience operating and maintaining Firewall Policies (Rule Sets).
Extensive hands-on experience in production firewall policy management at large-scale environments.
Strong operational discipline: change control validation, rollback planning, and post-change verification.
Proven ability to troubleshoot Network/Security and Firewall Policy issues under time pressure.
Experience in large-scale environments with multiple stakeholders.

Responsibilities

Optimize and implement firewall rules to mitigate risk and protect data.
Own day-to-day firewall policy operations, tuning, cleanup and decommissions.
Safely apply firewall policy changes within defined change processes with validation.
Troubleshoot connectivity and policy issues and outages with cross-team collaboration.
Identify and drive automation and AI opportunities to improve efficiency.

Skills

Firewall policy management

Palo Alto

AI/Automation

Change management

Troubleshooting

Networking fundamentals

Python scripting

Panorama

CI/CD with ServiceNow

Education

Bachelor’s degree in Computer Science or Cybersecurity

Certification (e.g., CISSP/CISM)

Tools

Panorama

Palo Alto CLI

ServiceNow workflows

GitHub Copilot

Visual Studio Code

Jupyter Notebook

Job description

Role Summary:

We are looking for aPrincipal Cybersecurity Engineer (Firewall Policy Implementation), with demonstrated AI experienceto join our high-performing cybersecurity Team. This is ahands-on, deeply technical, engineering role for firewall experts withreal-world Firewall Policy operations and management experienceat thelarge-scale enterprise level. This position is not people management and is not intended for junior or mid-level candidates. Supervisory-only or Advisory-only level experience will not suffice for this role. You will be responsible foroperating, maintaining, and optimizing Firewall Platforms, drivingpolicy quality and consistency. Additionally, you will support troubleshooting and operational excellence across a complex, global environment. Over time, you will also help applyOperational Artificial Intelligence (AI) capabilities to improve efficiency, reliability, and security.

This is not a remote or hybrid position. This role requires onsite presence5 days per weekin the Charlotte, NC hub location. However, other hub locations, such as Dallas, TX; Bothell, WA; Middletown, NJ; or Alpharetta, GA may be considered for exceptionally strong candidate matches.

Key Responsibilities:

Typical tasks may include, but are not limited to the following:

Security Implementation and Management: Optimize and implement firewall rules to mitigate risk, harden perimeter defenses, and protect systems, critical infrastructure, and customer data.
Firewall Policy Lifecycle Management: Own day-to-day firewall policy operations, management, tuning, cleanup, insertions, removals, and hardware decommissions.
Execute Configuration Change Management: Safely apply approved firewall policy changes within defined change processes, including validation and post-change verification to ensure changes are properly approved, documented, and meet intended outcomes.
Troubleshoot Connectivity and Security Policy Issues and Outages: Collaborate with architecture, engineering, and operations teams to troubleshoot outages and security incidents through identification, triage, analysis, containment, recovery, and root cause determination.
Identify and Drive Automation and AIOpportunities: Leverage AT&T-owned and managed instances of Copilot, ChatGPT, GitHub, Gemini Claude, etc., to reduce tedious manual process and improve accuracy.
Risk Assessment and Strategic Planning: Perform risk assessments and analyze complex security issues to develop mitigation strategies and reduce attack surface exposure, supporting forward-looking research, planning, and innovation in cybersecurity.
Technical Support and Collaboration: Provide technical support and expertise for security-related rollouts and issues. Work closely with IT, network, and business units to integrate security measures, and support various cyber-related projects.

Ramp-Up / Initial Focus:

Learn the team’s environment, offerings, tooling, processes, and operating models.
Complete structured onboarding: mentoring, coaching sessions, proficiency checks, and shadowing.
Earn authorization/sign-off to independently execute Firewall policy changes and operational tasks as directed and participate in an on-call rotation for troubleshooting in coordination with AT&T’s Global Technology Operations Center (GTOC).

Long-Term Focus & Scope:

Once fully integrated into the operational rotation, you will execute changes and navigate processes and systems to deliver Firewall policy updates, removals, monitoring/soak, and incident troubleshooting at enterprise scale as directed.

As proficiency grows, you will help introduce and matureAI-assisted operationsto improve throughput, reduce risk, and strengthen defense layers.

Required Qualifications:

This is a Principal Position requiring direct, recent experience implementing, validating, and troubleshooting Firewall Policies.

7+ years’ experience operating and maintaining Firewall Policies (Rule Sets).
Extensive hands-on experience managingenterprise Firewall Policyin production environments.
Strong operational discipline: change control validation, closely following documented processes, rollback planning, and post-change verification.
Proven ability to troubleshoot Network/Security and Firewall Policy issues under time pressure.
Experience working in large-scale, complex environments with multiple stakeholders.

Preferred Qualifications:

Certified Information Systems Security Professional (CISSP) or equivalent cybersecurity certification (CISM, CISA, CRISC, etc.).
Any Palo Alto certifications such asPCNSE / PCNSA(or equivalent demonstrated experience).
Experience withPalo Alto CLIpolicy automation, orchestration, or "policy as code" approaches andPythonpolicy scripting.
Experience with Visual Studio Code, Jupyter Notebook, and Agentic coding using GitHub Copilot, Claude Code, OpenAI Codex (ChatGPT).
8+ years of hands-on cybersecurity/network security engineering experience, including enterprise operations.
5+ years ofPalo Alto Networks (PAN-OS)Firewall platform and policy management in production environments.
Exposure to AI/ML-enabled operations, AIOps, or using AI tooling for incident reduction and efficiency.
Familiarity with metrics-driven operations (usage, hit counts, error rates, change success, MTTR, policy hygiene)
Experience with AlgoSec, URL Filtering,WildFire,Threat Prevention,DNS Security, and security profile tuning.
Experience withSSL decryptionstrategy/operations, including break/fix and exception handling.
Exposure toAIOps / Operational AIuse cases (e.g., anomaly detection, change risk scoring, incident summarization, knowledge retrieval, workflow automation).
Experience integrating Firewall operations with ITSM and CI/CD tooling (e.g., ServiceNow workflows, change gates, automated validation).
Familiarity with network fundamentals at scale: BGP/OSPF basics, VRFs, VLANs, IPsec concepts, DNS, and load-balancing impacts on traffic paths.

Success Looks Like:

Safe, accurate, and timely delivery of Firewall changes per SLA requirements with minimal rework.
Strong troubleshooting outcomes and reduced incident recurrence.
Improved operational efficiency through automation and AI-assisted workflows.
Clear documentation and process contributions that scale across the team.

Demonstrated expertise withPalo Alto Firewall policy lifecycle: rule creation/updates, cleanup/removals, recertification, and audit-ready documentation.
Strong working knowledge ofApp-ID, User-ID, Content-ID, zones, security policies, NAT policies, and service objects.
Hands-on experience troubleshooting and resolving issues involving:
- Security/NAT rule matching and shadowing
- Routing impacts on policy enforcement
- Decryption/policy interactions (where applicable)
- Application behavior vs. port-based assumptions
Operational rigor with enterprise change processes: risk assessment, implementation plans, validation/testing, rollback planning, and post-change verification.
Experience using centralized management such asPanorama(templates, device groups, commits, commit validation, log collection basics.)
Proficiency analyzing logs and traffic flows usingTraffic logs, Threat logs, URL logs, and packet captures; ability to validate policy outcomes with evidence.
Ability to partner effectively with network, application, and operations teams to drive outcomes under time constraints.
Strong documentation skills and ability to follow/author repeatable processes (playbooks & runbooks).
Job Contribution: An expert in their field, applying broad business knowledge and strategic insight surrounding emerging trends and technologies to solve complex problems and drive organizational results. Leads critical, high-impact projects and designs/implements innovative business strategies. Works with minimal oversight, frequently consulting senior leadership and influencing executive decisions. Serves as a mentor and assists others with challenging issues.

Supervisor: No

TCP Career Step Differentiator: Manages and leads very complex cybersecurity work and is an expert in a specific cyber area. Creates plans that impact large organizations, multiple very complex applications/system, etc.

Education/Experience: Bachelor’s degree (BS/BA) desired in Computer Science or Cybersecurity. 7+ years of related experience. Certification is required in some areas.

Our Principal Cybersecurity jobs earn between $155,400.00 - $261,100.00 USD Annual. Not to mention all the other amazing rewards that working at AT&T offers. Individual starting salary within this range may depend on geography, experience, expertise, and education/training.

Joining our team comes with amazing perks and benefits:

Medical/Dental/Vision coverage
401(k) plan
Tuition reimbursement program
Paid Time Off and Holidays (based on date of hire, at least 23 days of vacation each year and 9 company-designated holidays)
Paid Parental Leave
Paid Caregiver Leave
Additional sick leave beyond what state and local law require may be available but is unprotected
Adoption Reimbursement
Disability Benefits (short term and long term)
Life and Accidental Death Insurance
Supplemental benefit programs: critical illness/accident hospital indemnity/group legal
Employee Assistance Programs (EAP)
Extensive employee wellness programs
Employee discounts up to 50% off on eligible AT&T mobility plans and accessories, AT&T internet (and fiber where available) and AT&T phone