Principal, Infrastructure Engineering, ITC

Become a Part of the NIKE, Inc. Team

NIKE, Inc. does more than outfit the world’s best athletes. It is a place to explore potential, obliterate boundaries and push out the edges of what can be. The company looks for people who can grow, think, dream and create. Its culture thrives by embracing diversity and rewarding imagination. The brand seeks achievers, leaders and visionaries. At NIKE, Inc. it’s about each person bringing skills and passion to a challenging and constantly evolving game.

WHO YOU’LL WORK WITH

As a Principal Firewall Software Engineer, you will serve as the strategic and technical lead for enterprise firewall architecture, implementation, and operations. You will drive the design and deployment of scalable, secure, and resilient firewall solutions across global environments, ensuring alignment with Zero Trust principles, compliance frameworks, and business continuity goals. This role is pivotal in shaping the future of the organization's network security posture.

WHO WE ARE LOOKING FOR

The candidate shall have significant enterprise level Security acumen, experience working on Palo Alto Next Generation Firewalls, and managerial experience. 

• 10+ years in network security engineering with a focus on enterprise firewall platforms.

• Deep expertise in Palo Alto Networks technologies and HA firewall architecture.

• Strong knowledge of routing/switching protocols (BGP, VRF, MPLS), wireless, and SD-WAN.

• Proven experience with SSL decryption, DLP, and Zero Trust implementations.

• Familiarity with compliance frameworks such as NIST, ISO 27001, and GDPR.

• Proficiency in scripting and automation (Python, Terraform, Jenkins).

• Excellent communication and leadership skills; ability to influence across technical and executive audiences.

• Understanding of network design and operations across full stack technologies

• Hands-on experience with traffic decryption and privacy regulations

• Knowledge of network threat prevention methodologies and protocols

• Experience with Network Access Control systems such as Cisco ISE

WHAT YOU’LL WORK ON

You will be responsible for being strategic and technical lead for Firewall architecture spanning Next Generation Firewalls, SD-WAN, and Cisco ASA platforms in addition to playing a role is building automations, Agents, and solutions to further Nike’s journey towards Zero-Trust networks. 

• Mentors and develops the capabilities of team members

• Architect and implement enterprise-wide firewall solutions using Palo Alto Networks technologies (NGFW, Panorama, Prisma, Cortex), including high availability configurations and global policy orchestration.

• Define and execute network segmentation and identity-based access strategies, integrating with Cisco ISE and 802.1x protocols to enforce least-privilege access.

• Secure hybrid cloud environments (AWS, Azure) by managing ingress/egress controls, intra-cloud segmentation, and cloud-to-on-prem traffic flows.

• Deploy and tune advanced threat prevention features (IDS/IPS, URL/DNS filtering, sandboxing, SSL/TLS decryption) while balancing performance and privacy compliance.

• Develop and maintain automation pipelines using Python, Terraform, and GitHub to streamline firewall rule management, logging, and compliance reporting.

• Lead root cause analysis and remediation for firewall-related incidents, including software upgrades, hardware failures, and DLP enforcement.

• Collaborate with Cybersecurity, Cloud, and Infrastructure teams to align firewall policies with broader enterprise security objectives and compliance mandates.

NIKE, Inc. is a growth company that looks for team members to grow with it. Nike offers a generous total rewards package, casual work environment, a diverse and inclusive culture, and an electric atmosphere for professional development. No matter the location, or the role, every Nike employee shares one galvanizing mission: To bring inspiration and innovation to every athlete* in the world.

NIKE, Inc. is an equal opportunity employer. Qualified applicants will receive consideration without regard to race, color, religion, sex, national origin, age, sexual orientation, gender identity, gender expression, veteran status, or disability.