Principal Network Engineer

Procore Technologies; Austin (TX); Hybrid; USD 190,000 - 261,000; Full time

Job summary

Procore Technologies in Austin, TX, is seeking a Principal Network Engineer to lead the corporate network strategy across on-prem and cloud environments. This role sits on the IT Infrastructure team and requires deep SASE/ZTNA expertise, enterprise security, and strong cross-functional leadership.

Based in our Austin office with a highly flexible hybrid schedule, you will drive multi-year roadmaps, partner with security and platform teams, and mentor engineers while delivering scalable network

Qualifications

• Extensive enterprise network design, deployment and operations experience.
• Deep knowledge of SASE/ZTNA platforms and multi-cloud networking.
• Experience with network automation and IaC tooling to manage distributed state.

Responsibilities

• Define long-term technical direction and reference architectures for global network footprint.
• Evolve enterprise SASE/ZTNA platform and enable Zero Trust N access model.
• Collaborate with security, identity and platform teams for integrated controls.
• Drive automation and standardize configurations across environments.
• Lead incident response and mentor the network engineering team.

Skills

BGP OSPF routing

SASE/ZTNA platforms

Multi-cloud networking

Network automation

Zero Trust security

Leadership & collaboration

Networking architecture

Education

Bachelor's degree in CS/MIS

CCIE/CCNP or cloud certs

Tools

Zscaler ZIA

Zscaler ZPA

AWS/Azure/GCP

Terraform

Ansible

Python

Job description

Procore Technologies is the leading technology partner for every stage of construction. We empower construction teams to drive efficiency and mitigate risk through actionable AI & data-driven insights. For over 20 years, we have been transforming the industry with purpose-built solutions for construction professionals and we’re looking for talented people to help us build together.

We are looking for a Principal Network Engineer to serve as the technical lead for Procore's corporate network across on-premises and cloud environments.

As the Staff Network Engineer on our IT Infrastructure team, you will work closely with Security, Cloud/Platform Engineering, IT leadership, and external partners to establish reference architectures, advance our Zero Trust/SASE strategy, and build scalable network automation.

Your strengths in enterprise network architecture, Zero Trust/SASE platforms (Zscaler ZIA/ZPA), and cloud networking infrastructure will drive your success.

You will report to the Manager of Network Engineering and will be based in our Austin, TX office with a very flexible hybrid work week.

What You’ll Do

• Own the long-term technical direction, multi-year roadmap, and reference architecture for Procore's global network footprint across corporate offices, data centers, and multi-cloud IaaS environments.
• Lead the architectural evolution and operational maturity of our enterprise SASE/SSE platform (Zscaler ZIA and ZPA), transitioning legacy perimeter access to a secure, least-privilege Zero Trust Network Access (ZTNA) model.
• Partner with Identity, InfoSec, and Platform teams to integrate network access controls with identity providers (SAML/SCIM), device posture validation, and SIEM logging pipelines.
• Drive network automation and infrastructure-as-code initiatives, engineering scalable tooling that reduces operational toil and enforces consistent configuration standards across global environments.
• Serve as the principal escalation authority for critical network incidents, directing root-cause investigations and implementing durable architectural remediations.
• Mentor and elevate network engineering team members through technical design reviews, knowledge sharing, and establishing best-in-class operational standards.
• Conduct vendor evaluations and technology assessments to deliver well-reasoned build-versus-buy recommendations aligned with enterprise compliance, capacity, and performance requirements.

What You Bring

• Extensive enterprise network engineering experience designing, deploying, and operating highly available routing (BGP, OSPF), switching, SD-WAN, and hybrid cloud network topologies.
• Proven hands-on production expertise architecting and administering SASE/ZTNA platforms at enterprise scale, with deep knowledge of Zscaler ZIA and ZPA (or comparable platforms such as Palo Alto Prisma Access, Netskope, or Cloudflare One).
• Strong technical background in multi-cloud networking (AWS and/or Azure/GCP), including transit gateway design, VPC/VNet peering, direct interconnects, and hybrid cloud connectivity.
• Demonstrated capability with network automation and infrastructure-as-code tooling (e.g., Python, Ansible, Terraform) to manage distributed network state programmatically.
• In-depth understanding of enterprise security engineering, including next-generation firewalls, TLS/SSL inspection, PKI/cryptography in transit, microsegmentation, and zero-trust policies.
• Strong cross-functional leadership and communication skills, with a track record of driving consensus on complex technical architectures across IT, Engineering, and Security teams.
• Bachelor's degree in Computer Science, Management Information Systems, or a related technical field, or equivalent practical work experience; advanced industry certifications (e.g., CCIE/CCNP, ZDTA/ZDTE, or Cloud Network Specialties) are a plus.

Strong-fit Background Might Include

• Enterprise Network Architect or Principal Network Engineer specializing in global SASE/Zero Trust migrations
• Cloud Network Infrastructure Engineer bridging enterprise data centers with AWS/Azure hybrid environments
• Network Security Engineer with extensive production experience scaling Zscaler (ZIA/ZPA) and identity-aware proxy architectures
• Network Automation Engineer with deep expertise in Python, Terraform, and automated configuration compliance

Discover our recruiting process and interview tips from our talent acquisition team on our blog.

Additional Information

Base Pay Range

189,920.00 - 261,140.00 USD Annual

This role may also be eligible for Equity Compensation and/or Bonus Incentive Compensation. Procore is committed to offering competitive, fair, and commensurate compensation. Actual compensation will be based on a candidate’s job-related skills, experience, education or training, and location.

For Los Angeles County (unincorporated) Candidates

Procore will consider for employment all qualified applicants, including those with arrest or conviction records, in accordance with the requirements of applicable federal, state, and local laws, including the City of Los Angeles’ Fair Chance Initiative for Hiring Ordinance, the Los Angeles County Fair Chance Ordinance for Employers, and the California Fair Chance Act.

A criminal history may have a direct, adverse, and negative relationship on the following job duties, potentially resulting in the withdrawal of the conditional offer of employment: 1. appropriately managing, accessing, and handling confidential information including proprietary and trade secret information, as well as accessing Procore's information technology systems and platforms; 2. interacting with and occasionally having unsupervised contact with internal/external customers, stakeholders, and/or colleagues; and 3. exercising sound judgment.