Staff Network Engineer: Zero Trust & Zscaler Lead

Snowflake; Bellevue (WA); On-site; USD 160,000 - 210,000; Full time

Benefits offered by this job

Medical insurance

Dental insurance

Vision insurance

401(k) retirement plan

Paid time off

Paid holidays

Parental leave

Employee assistance program

Job summary

Snowflake is seeking an experienced Staff Network Engineer to lead the design, operation and optimization of our Zero Trust and secure-access platform. You will own the ZIA/ZPA deployment and help tune a modern, multi-cloud network that supports 10,000+ users worldwide.

You’ll drive automation, observability, and incident responses, collaborate across teams, and travel for site builds as needed. A senior, hands-on practitioner with strong ITSM and documentation skills will thrive here.

Qualifications

• At least 10 years of enterprise network infrastructure experience with 3+ years on Zscaler ZIA/ZPA.
• Expertise in Zero Trust / SASE, ZTNA, proxy/SWG, SSL inspection, and cloud security.
• Hands-on Palo Alto (PAN-OS) and enterprise VPN experience.
• Aruba wireless and Cisco LAN/WAN fundamentals.
• Strong TCP/IP, DNS, DHCP, TLS/DTLS, BGP, and QoS troubleshooting.
• Multi-cloud networking across AWS/Azure/GCP environments.
• Automation mindset with Python scripting and API configuration.
• Solid ITSM, documentation, and cross-team communication.

Responsibilities

• Own and operate the Zscaler platform end-to-end, including policy frameworks and topology.
• Troubleshoot secure-access incidents and perform root-cause analysis for complex events.
• Manage Palo Alto firewalls, Panorama and GlobalProtect, and migrate toward Zscaler.
• Support Aruba wireless and Cisco switching globally.
• Design, install, and configure network devices and ISP circuits for new offices.
• Build automation and observability with log analytics and dashboards.
• Troubleshoot network constructs in AWS, Azure, and GCP (NVAs, NSG, VPC).
• Create runbooks, escalation procedures, and knowledge-base content.
• Participate in on-call rotations and lead responses to incidents.
• Travel internationally for site builds when required.

Skills

Zscaler ZIA/ZPA

Zero Trust/SASE

Palo Alto VPN

Aruba/Cisco networking

TCP/IP troubleshooting

Multi-cloud networking

Automation scripting

ITSM & documentation

Tools

Palo Alto PAN-OS

GlobalProtect VPN

Aruba Central

Job description

Snowflake is seeking an experienced Staff Network Engineer to lead the design, operation and optimization of our Zero Trust and secure-access platform. You will own the ZIA/ZPA deployment and help tune a modern, multi-cloud network that supports 10,000+ users worldwide.

You’ll drive automation, observability, and incident responses, collaborate across teams, and travel for site builds as needed. A senior, hands-on practitioner with strong ITSM and documentation skills will thrive here.