As a Senior Firewall Engineer (Level 3), you will provide expert-level technical engineering and design for enterprise network security infrastructure. You will be responsible for working complex firewall deployments, handling high-level tier-3 troubleshooting, and driving innovation in advanced cloud firewall capabilities. This role requires an expert understanding of network security principles, deep hands-on technical experience with enterprise firewall technologies, and the ability to solve complex infrastructure challenges. Primary customers and peer groups will be Core Infrastructure Engineering, Corporate Information Security, and Nike Operations Center
WHO WE ARE LOOKING FORThe ideal candidate brings strong enterprise network security expertise combined with an engineering mindset focused on automation, platform scalability, and operational excellence. This individual should possess deep technical knowledge of Palo Alto security platforms, cloud security architectures, security automation, and modern software engineering practices. The candidate will play a critical role in designing, building, automating, and supporting Nike's next-generation Network Security Platform while contributing to Firewall-as-Code, Zero Trust, and cloud security transformation initiatives.
5+ years of experience in Network Security Engineering with demonstrated expertise in enterprise-scale network security environments.
Deep hands-on expertise with Palo Alto Networks NGFW, Panorama, Log Collectors, Device Groups, Template Stacks, and enterprise firewall architectures.
Strong understanding of enterprise networking fundamentals including routing, switching, TCP/IP, DNS, DHCP, WAN, cloud networking, and application traffic flows.
Hands-on experience with Cloud NGFW, Prisma Access (SASE/SSE), and modern cloud-delivered security platforms.
Experience designing and supporting SSL/TLS decryption solutions at scale, with an understanding of privacy and regulatory requirements including GDPR, DPDP, and CCPA.
Experience with Network Access Control platforms such as Cisco ISE, including TACACS+, RADIUS, posture assessment, profiling, and identity-based access controls.
Strong understanding of Zero Trust principles, identity-aware security policies, network segmentation, and micro-segmentation strategies.
Advanced troubleshooting capabilities including packet captures, session analysis, flow analysis, log correlation, performance troubleshooting, and root cause analysis.
Experience integrating firewall telemetry and operational data with Panorama, Splunk, SIEM platforms, and enterprise observability solutions.
Strong proficiency in Python development for automation, API integrations, workflow orchestration, and operational tooling.
Experience working with REST APIs, JSON, YAML, and API-driven infrastructure automation.
Proficiency with Git-based development workflows including branching strategies, pull requests, code reviews, and version control best practices.
Hands-on experience with automation technologies such as Ansible, Terraform, and Infrastructure-as-Code methodologies.
Experience building and supporting CI/CD pipelines using GitHub Actions, Jenkins, Azure DevOps, GitLab CI, or similar technologies.
Understanding of software development lifecycle (SDLC), testing methodologies, release management, and engineering best practices.
Experience building reusable automation services, engineering tools, and platform capabilities that improve operational efficiency and engineering productivity.
Understanding of Firewall-as-Code, Policy-as-Code, and Infrastructure-as-Code concepts and implementation patterns.
Experience leveraging telemetry, monitoring, and observability platforms to improve operational visibility and platform reliability.
Strong understanding of service health monitoring, alerting strategies, troubleshooting workflows, and operational analytics.
You will be responsible for designing, engineering, automating, and operating Nike's global Network Security Platforms. As a Senior Network Security Platform Engineer, you will serve as a key technical contributor driving Firewall-as-Code, Zero Trust, cloud security, observability, and security automation initiatives. You will partner closely with security architects, cloud engineers, platform engineers, and infrastructure teams to build scalable, reliable, and automation-first security services.
Serve as a senior technical engineer within the Network Security Platform team, delivering secure, scalable, and highly available firewall solutions across global environments.
Design, deploy, and support Palo Alto NGFW, Panorama, Cloud NGFW, and Prisma Access solutions while ensuring adherence to architectural standards and security best practices.
Lead complex Tier-3 troubleshooting activities involving network connectivity, application flows, security policy enforcement, SSL decryption, routing, and cloud integrations.
Develop production-grade technical documentation, including High-Level Designs (HLDs), Low-Level Designs (LLDs), implementation plans, operational runbooks, and Root Cause Analysis (RCA) reports.
Design and implement Firewall-as-Code capabilities leveraging Git-based workflows, Infrastructure-as-Code principles, APIs, and automation frameworks.
Build and maintain Python-based automation solutions to automate firewall policy management, configuration deployment, compliance validation, and operational workflows.
Develop reusable automation modules, frameworks, and self-service capabilities that reduce manual effort and improve engineering efficiency.
Integrate firewall platforms with enterprise systems including ITSM, CMDB, observability, and orchestration platforms through API-driven automation.
Implement Policy-as-Code and automated validation frameworks to improve change quality and deployment consistency
Contribute to Infrastructure-as-Code implementations using Terraform, Ansible, and related automation technologies.
Build and support CI/CD pipelines for firewall policy deployment, platform configuration management, and security automation workflows.
Participate in code reviews, testing, release management, and engineering governance processes to maintain high-quality engineering standards.
Collaborate with platform engineering teams to integrate network security capabilities into enterprise DevSecOps pipelines.
Support Nike's Zero Trust initiatives through network segmentation, identity-aware security policies, micro-segmentation, and secure access architectures.
Evaluate and implement cloud-native security services, SASE/SSE technologies, and emerging cloud firewall capabilities.
PCNSE / CCNP security certification
CCNA Routing & Switching certification
Any cloud provider certification
Coding language (Other than python, Ansible, if any)
Skills Required
- 5+ years of Network Security Engineering experience in enterprise-scale environments
- Deep hands-on expertise with Palo Alto Networks NGFW, Panorama, Log Collectors, Device Groups, and Template Stacks
- Experience with Cloud NGFW and Prisma Access (SASE/SSE) and cloud-delivered security platforms
- Strong understanding of routing, switching, TCP/IP, DNS, DHCP, WAN, cloud networking, and application traffic flows
- Experience designing and supporting SSL/TLS decryption solutions at scale with privacy/regulatory awareness (GDPR, DPDP, CCPA)
- Hands-on experience with Network Access Control platforms such as Cisco ISE, including TACACS+ and RADIUS
- Strong understanding of Zero Trust principles, identity-aware policies, network segmentation, and micro-segmentation
- Advanced troubleshooting skills: packet captures, session/flow analysis, log correlation, performance troubleshooting, RCA
- Experience integrating firewall telemetry and operational data with Panorama, Splunk, SIEM, and observability solutions
- Strong proficiency in Python for automation, API integrations, and operational tooling
- Experience with REST APIs, JSON, and YAML for API-driven infrastructure automation
- Proficiency with Git-based development workflows (branching, PRs, code reviews)
- Hands-on experience with Ansible, Terraform, and Infrastructure-as-Code methodologies
- Experience building and supporting CI/CD pipelines (GitHub Actions, Jenkins, Azure DevOps, GitLab CI or similar)
- Understanding of SDLC, testing methodologies, release management, and engineering best practices
- Experience building reusable automation modules, self-service capabilities, and platform engineering tools
- Familiarity with Firewall-as-Code, Policy-as-Code, and IaC implementation patterns
- Experience leveraging telemetry, monitoring, and observability platforms for operational visibility and reliability
- Experience developing production-grade technical documentation: HLDs, LLDs, runbooks, RCAs
- PCNSE or CCNP Security, CCNA, cloud provider certification, or additional coding language (nice to have)
Nike Compensation & Benefits Highlights
The following summarizes recurring compensation and benefits themes identified from responses generated by popular LLMs to common candidate questions about Nike and has not been reviewed or approved by Nike.
-
Retirement Support — A 401(k) with a company match is complemented by options such as a Mega Backdoor Roth and deferred compensation for eligible earners. Financial coaching and structured savings programs support long-term financial security.
-
Equity Value & Accessibility — An Employee Stock Purchase Plan with a stock discount sits alongside broad-based equity vehicles like RSUs and non-qualified stock options. These avenues expand wealth-building opportunities beyond base pay.
-
Parental & Family Support — Paid parental leave includes maternity and paternity time, recently expanded in the U.S. to 16 weeks and extended to part-time retail teammates. Additional supports include childcare assistance at select locations and family-building benefits such as fertility, surrogacy, and adoption.
Nike Insights
What We Do
At NIKE, Inc., we innovate to serve athletes*. Every teammate - from coder to creator - plays a role in making these athletes’ dreams real. Our tech, data, and digital teams push limits every day, building the future of sport and the tools that drive it. Here, curiosity is fuel. Innovation is the game plan. Different perspectives keep us on the offense. You’ll solve challenges worth tackling, grow fast and belong to a team that backs you to do the right thing. Bring your drive. Bring your bold. Let’s move the world, together. Take your first step at nike.com/careers * If you have a body, you’re an athlete.
Why Work With Us
At NIKE, Inc., your dedication fuels the future of sport. There is a sense of pride that comes from representing an iconic brand and shaping its future. Here, we treat every day as a new opportunity to push boundaries, ask tough questions and share whole-hearted convictions. We are a team – united by the belief that anything is possible.
Gallery
