Staff Network Engineer

Snowflake; Bellevue (WA); On-site; USD 160,000 - 210,000; Full time

Benefits offered by this job

Medical insurance

Dental insurance

Vision insurance

401(k) retirement plan

Paid time off

Paid holidays

Parental leave

Employee assistance program

Job summary

Snowflake is seeking an experienced Staff Network Engineer to lead the design, operation and optimization of our Zero Trust and secure-access platform. You will own the ZIA/ZPA deployment and help tune a modern, multi-cloud network that supports 10,000+ users worldwide.

You’ll drive automation, observability, and incident responses, collaborate across teams, and travel for site builds as needed. A senior, hands-on practitioner with strong ITSM and documentation skills will thrive here.

Qualifications

• At least 10 years of enterprise network infrastructure experience with 3+ years on Zscaler ZIA/ZPA.
• Expertise in Zero Trust / SASE, ZTNA, proxy/SWG, SSL inspection, and cloud security.
• Hands-on Palo Alto (PAN-OS) and enterprise VPN experience.
• Aruba wireless and Cisco LAN/WAN fundamentals.
• Strong TCP/IP, DNS, DHCP, TLS/DTLS, BGP, and QoS troubleshooting.
• Multi-cloud networking across AWS/Azure/GCP environments.
• Automation mindset with Python scripting and API configuration.
• Solid ITSM, documentation, and cross-team communication.

Responsibilities

• Own and operate the Zscaler platform end-to-end, including policy frameworks and topology.
• Troubleshoot secure-access incidents and perform root-cause analysis for complex events.
• Manage Palo Alto firewalls, Panorama and GlobalProtect, and migrate toward Zscaler.
• Support Aruba wireless and Cisco switching globally.
• Design, install, and configure network devices and ISP circuits for new offices.
• Build automation and observability with log analytics and dashboards.
• Troubleshoot network constructs in AWS, Azure, and GCP (NVAs, NSG, VPC).
• Create runbooks, escalation procedures, and knowledge-base content.
• Participate in on-call rotations and lead responses to incidents.
• Travel internationally for site builds when required.

Skills

Zscaler ZIA/ZPA

Zero Trust/SASE

Palo Alto VPN

Aruba/Cisco networking

TCP/IP troubleshooting

Multi-cloud networking

Automation scripting

ITSM & documentation

Tools

Palo Alto PAN-OS

GlobalProtect VPN

Aruba Central

Job description

At Snowflake, we are powering the era of the agentic enterprise. To usher in this new era, we seek AI-native thinkers across every function who are energized by the opportunity to reinvent how they work. You don’t just use tools; you possess an innate curiosity, treating AI as a high-trust collaborator that is core to how you solve problems and accelerate your impact. We look for low-ego individuals who thrive in dynamic and fast-moving environments and move with an experimental mindset — who rapidly test emerging capabilities to discover simpler, more powerful ways to deliver results. At Snowflake, your role isn't just to execute a function, but to help redefine the future of how work gets done.

Staff Network Engineer

Location: MPK/Bellevue/Dublin

Snowflake's Enterprise Technology Network Services team is looking for a Senior Network Engineer to lead the design, operation, and optimization of our Zero Trust and secure-access platform. This role is Zscaler-centric — you will own the health, performance, and roadmap of our ZIA/ZPA deployment — while working across a modern, multi-cloud network stack that supports a global workforce of 10,000+ users. You'll be the escalation point for the most complex connectivity issues and a driver of automation and observability across the environment.

What You’ll Do

• Own and operate the Zscaler platform (ZIA, ZPA, ZDX, ZCC) end-to-end, including policy frameworks, app-segmentation models, PAC/traffic-forwarding standards, App Connector topology, and NSS/log-streaming design.
• Troubleshoot secure-access incidents like tunnel flapping, broker/connector health, SSL inspection edge cases, DNS/DTLS failures, and lead root-cause analysis for systemic issues.
• Manage Palo Alto firewalls, Panorama and GlobalProtect VPN, while planning migration toward Zscaler solutions.
• Support Aruba (Central) Wireless, Ekahau and Cisco Catalyst switches globally.
• Design, install, and configure network devices and ISP circuits at new offices.
• Build automation and observability: leverage log analytics (we run our network telemetry through Snowflake) to create dashboards, alerting, and proactive detection.
• Troubleshoot secure Network constructs in AWS, Azure, and GCP such as NVAs, NSG, VPC, UDR, DirectConnect, ExpressRoute.
• Author technical runbooks, escalation procedures, and knowledge-base content.
• Participate in on-call rotations for the changes and lead responses to major network incidents.
• Be able to travel internationally for short periods of time for site builds.

What You’ll Bring

• At least 10 years of enterprise network infrastructure experience, including 3+ years of hands‑on Zscaler ZIA/ZPA design and deployment at scale.
• Recognized depth in Zero Trust / SASE architecture with expertise in ZTNA, proxy/SWG, SSL inspection, and cloud security.
• Hands‑on Palo Alto (PAN-OS, GlobalProtect, Panorama) and enterprise VPN experience.
• Aruba wireless and Cisco LAN/WAN (routing, switching, 802.1x) fundamentals.
• Strong TCP/IP, DNS, DHCP, TLS/DTLS, BGP, and QoS troubleshooting skills.
• Multi-cloud (AWS/Azure/GCP) networking and site-to-cloud connectivity experience.
• Automation mindset: Python scripting, API config, and log observability (SQL/Snowflake a plus).
• Strong ITSM management, documentation, and communication skills.

Nice to Have

• Certifications: Zscaler (ZCCA-IA/PA, ZDTA), Palo Alto (PCNSE), Aruba (ACMA/ACMP), or Cisco (CCNA/CCNP).
• Experience migrating legacy VPNs (GlobalProtect) to ZPA.
• Familiarity with SASE and network-as-code/IaC (Terraform).
• Experience operating in high-growth SaaS or cloud-native environments.

Snowflake is growing fast, and we’re scaling our team to help enable and accelerate our growth. We are looking for people who share our values, challenge ordinary thinking, and push the pace of innovation while building a future for themselves and Snowflake.

How do you want to make your impact?

The following represents the expected range of compensation for this role:

• The estimated base salary range for this role is $160,000 - $210,000.
• Additionally, this role is eligible to participate in Snowflake’s bonus and equity plan.

The successful candidate’s starting salary will be determined based on permissible, non-discriminatory factors such as skills, experience, and geographic location.

This role is also eligible for a competitive benefits package that includes: medical, dental, vision, life, and disability insurance; 401(k) retirement plan; flexible spending & health savings account; at least 12 paid holidays; paid time off; parental leave; employee assistance program; and other company benefits.