Partner with Identity, InfoSec, and Platform teams to integrate network access controls with identity providers (SAML/SCIM), device posture validation, and SIEM logging pipelines.
Drive network automation and infrastructure-as-code initiatives, engineering scalable tooling that reduces operational toil and enforces consistent configuration standards across global environments.
Serve as the principal escalation authority for critical network incidents, directing root-cause investigations and implementing durable architectural remediations.
Mentor and elevate network engineering team members through technical design reviews, knowledge sharing, and establishing best-in-class operational standards.
Conduct vendor evaluations and technology assessments to deliver well-reasoned build-versus-buy recommendations aligned with enterprise compliance, capacity, and performance requirements.
What You Bring
Extensive enterprise network engineering experience designing, deploying, and operating highly available routing (BGP, OSPF), switching, SD-WAN, and hybrid cloud network topologies.
Proven hands-on production expertise architecting and administering SASE/ZTNA platforms at enterprise scale, with deep knowledge of Zscaler ZIA and ZPA (or comparable platforms such as Palo Alto Prisma Access, Netskope, or Cloudflare One).
Strong technical background in multi-cloud networking (AWS and/or Azure/GCP), including transit gateway design, VPC/VNet peering, direct interconnects, and hybrid cloud connectivity.
Demonstrated capability with network automation and infrastructure-as-code tooling (e.g., Python, Ansible, Terraform) to manage distributed network state programmatically.
In-depth understanding of enterprise security engineering, including next-generation firewalls, TLS/SSL inspection, PKI/cryptography in transit, microsegmentation, and zero-trust policies.
Strong cross-functional leadership and communication skills, with a track record of driving consensus on complex technical architectures across IT, Engineering, and Security teams.
Bachelor's degree in Computer Science, Management Information Systems, or a related technical field, or equivalent practical work experience; advanced industry certifications (e.g., CCIE/CCNP, ZDTA/ZDTE, or Cloud Network Specialties) are a plus.
Strong-fit Background Might Include
Enterprise Network Architect or Principal Network Engineer specializing in global SASE/Zero Trust migrations
Cloud Network Infrastructure Engineer bridging enterprise data centers with AWS/Azure hybrid environments
Network Security Engineer with extensive production experience scaling Zscaler (ZIA/ZPA) and identity-aware proxy architectures
Network Automation Engineer with deep expertise in Python, Terraform, and automated configuration compliance
Discover our recruiting process and interview tips from our talent acquisition team on our #LifeAtProcore blog.
Additional Information
Base Pay Range
189,920.00 - 261,140.00 USD Annual
This role may also be eligible for Equity Compensation and/or Bonus Incentive Compensation. Procore is committed to offering competitive, fair, and commensurate compensation. Actual compensation will be based on a candidate’s job-related skills, experience, education or training, and location.
For Los Angeles County (unincorporated) Candidates
Procore will consider for employment all qualified applicants, including those with arrest or conviction records, in accordance with the requirements of applicable federal, state, and local laws, including the City of Los Angeles’ Fair Chance Initiative for Hiring Ordinance, the Los Angeles County Fair Chance Ordinance for Employers, and the California Fair Chance Act.
A criminal history may have a direct, adverse, and negative relationship on the following job duties, potentially resulting in the withdrawal of the conditional offer of employment: 1. appropriately managing, accessing, and handling confidential information including proprietary and trade secret information, as well as accessing Procore's information technology systems and platforms; 2. interacting with and occasionally having unsupervised contact with internal/external customers, stakeholders, and/or colleagues; and 3. exercising sound judgment.
