Senior Infrastructure Engineer

WHO YOU’LL WORK WITH As a Senior Firewall Engineer (Level 3), you will provide expert-level technical engineering and design for enterprise network security infrastructure. You will be responsible for working complex firewall deployments, handling high-level tier-3 troubleshooting, and driving innovation in advanced cloud firewall capabilities. This role requires an expert understanding of network security principles, deep hands-on technical experience with enterprise firewall technologies, and the ability to solve complex infrastructure challenges. Primary customers and peer groups will be Core Infrastructure Engineering, Corporate Information Security, and Nike Operations Center WHO WE ARE LOOKING FOR The ideal candidate brings strong enterprise network security expertise combined with an engineering mindset focused on automation, platform scalability, and operational excellence. This individual should possess deep technical knowledge of Palo Alto security platforms, cloud security architectures, security automation, and modern software engineering practices. The candidate will play a critical role in designing, building, automating, and supporting Nike's next-generation Network Security Platform while contributing to Firewall-as-Code, Zero Trust, and cloud security transformation initiatives. 5+ years of experience in Network Security Engineering with demonstrated expertise in enterprise-scale network security environments. Deep hands-on expertise with Palo Alto Networks NGFW, Panorama, Log Collectors, Device Groups, Template Stacks, and enterprise firewall architectures. Strong understanding of enterprise networking fundamentals including routing, switching, TCP/IP, DNS, DHCP, WAN, cloud networking, and application traffic flows. Hands-on experience with Cloud NGFW, Prisma Access (SASE/SSE), and modern cloud-delivered security platforms. Experience designing and supporting SSL/TLS decryption solutions at scale, with an understanding of privacy and regulatory requirements including GDPR, DPDP, and CCPA. Experience with Network Access Control platforms such as Cisco ISE, including TACACS+, RADIUS, posture assessment, profiling, and identity-based access controls. Strong understanding of Zero Trust principles, identity-aware security policies, network segmentation, and micro-segmentation strategies. Advanced troubleshooting capabilities including packet captures, session analysis, flow analysis, log correlation, performance troubleshooting, and root cause analysis. Experience integrating firewall telemetry and operational data with Panorama, Splunk, SIEM platforms, and enterprise observability solutions. Strong proficiency in Python development for automation, API integrations, workflow orchestration, and operational tooling. Experience working with REST APIs, JSON, YAML, and API-driven infrastructure automation. Proficiency with Git-based development workflows including branching strategies, pull requests,…