{"id":4191968,"url":"https://alion.io/job/applied-materials-senior-network-security-engineer","title":"Senior Network Security Engineer","company":{"id":3903,"name":"Applied Materials","domain":"appliedmaterials.com","url":"https://alion.io/company/amat","size_band":"5000+","is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"Workday","truth_index":{"grade":"A","score":85,"open_postings":258,"ghost_share":0.004,"stale_share":0.578,"repost_share":0.012,"time_to_fill_p50_days":54,"computed_at":"2026-11-12T10:38:37Z"}},"role":"Security","role_family":"Security","seniority":"senior","employment_type":"full_time","work_mode":"on_site","remote_scope":null,"remote_scope_basis":null,"remote_working_hours":null,"hiring_geo_confidence":"structured","locations":["Santa Clara, United States"],"countries":["US"],"hiring_countries":[],"hiring_countries_total":0,"salary":{"min":152000,"max":208500,"currency":"USD","period":"year","gross":null,"usd_annual":208500},"salary_estimate":null,"experience_years_min":8,"visa_sponsorship":false,"relocation_package":false,"has_equity":true,"technologies":[{"name":"AIOps","optional":false},{"name":"AWS","optional":false},{"name":"Azure","optional":false},{"name":"BGP","optional":false},{"name":"CIS Benchmarks","optional":false},{"name":"DLP","optional":false},{"name":"DNS","optional":false},{"name":"FortiGate","optional":false},{"name":"GCP","optional":false},{"name":"ISO 27001","optional":false},{"name":"Microsoft Entra ID","optional":false},{"name":"MPLS","optional":false},{"name":"NIST CSF","optional":false},{"name":"Okta","optional":false},{"name":"OSPF","optional":false},{"name":"SIEM","optional":false},{"name":"Splunk","optional":false},{"name":"TCP/IP","optional":false},{"name":"VPN","optional":false},{"name":"Wireshark","optional":false},{"name":"Zero Trust","optional":false},{"name":"Zscaler","optional":false}],"status":"live","first_seen_at":"2026-11-09T00:00:00Z","employer_posted_date":"2026-11-09","last_verified_at":"2026-11-12T19:34:04Z","board_verified":true,"closed_at":null,"days_open":3,"trust":{"level":"ok","repost_count":null,"flags":[],"days_open":3},"description":"Who We Are\nApplied Materials is the global leader in materials science and engineering solutions that are at the foundation of virtually every new semiconductor chip and advanced display in the world. The equipment that we create and service is essential to advancing AI and accelerating the commercialization of next-generation semiconductor chips. Join us and push the boundaries of materials science and engineering in a company at the foundation of the electronics industry. The work we do together advances the world’s technology.\nWhat We Offer\nSalary:\n$152,000.00 - $208,500.00Location:\nSanta Clara,CAYou’ll benefit from a supportive work culture that encourages you to learn, develop, and grow your career as you take on challenges and drive innovative solutions for our customers. We empower our team to push the boundaries of what is possible-while learning every day in a supportive leading global company. Visit our Careers website to learn more.\nAt Applied Materials, we care about the health and wellbeing of our employees. We’re committed to providing programs and support that encourage personal and professional growth and care for you at work, at home, or wherever you may go. Learn more about our benefits.\nSummary\nThe Senior Network Security Engineer is a hands-on technical leader responsible for designing, implementing, securing, and operating enterprise firewall and network security infrastructure across data centers, manufacturing, OT, R&D, campus, and cloud environments. The primary focus of this role is Palo Alto Networks firewall architecture, engineering, policy governance, lifecycle management, and security posture optimization, with supporting expertise in Fortinet, SSE/SASE, Zero Trust, cloud security, routing, and security automation.\nJob Description\nApplied's IT organization has a long reputation of being a great place to work. The IT team has been recognized as one of Computerworld's 100 Best Places to Work in IT. In addition, numerous Applied IT leaders have been honored as CIO Magazine's Ones to Watch or Computerworld Premier 100 IT leaders.\nWe are seeking a Senior Network Security Engineer with deep expertise in enterprise firewall architecture and engineering to design, implement, secure, and continuously improve Applied Materials' global network security infrastructure.\nThis role is hands-on and highly technical, with primary responsibility for Palo Alto Networks NGFW, Panorama, Strata Cloud Manager, firewall policy architecture, security controls, lifecycle management, advanced troubleshooting, and automation across global data centers, manufacturing facilities, campuses, R&D, OT, and cloud environments.\nThe role partners closely with cybersecurity, cloud, network, OT, application, and infrastructure teams to deliver secure, resilient, scalable, and standardized network security services.\nCore Competencies\nExpert-level experience in enterprise network security and firewall technologies within large, global environments.\nDeep hands-on expertise with Palo Alto Networks NGFW, PAN-OS, Panorama, Strata Cloud Manager, PA-Series and VM-Series.\nExperience with Fortinet FortiGate, Forti Manager, and Forti Analyzer is preferred.\nStrong experience architecting and governing enterprise firewall rule bases, security policies, NAT, segmentation, policy lifecycle, recertification, and rule optimization.\nDeep knowledge of App-ID, User-ID, Device-ID, Security Profiles, SSL/TLS Decryption, Advanced Threat Prevention, IPS, URL Filtering, DNS Security, and WildFire.\nExperience with firewall posture and policy-management solutions including Palo Alto AIOps/BPA, SCM, Skybox, and Tufin.\nExpertise in high-availability firewall architectures using Active/Passive, Active/Active, HA clustering, ECMP, VSYS/VDOM, and multi-tenancy.\nStrong understanding of TCP/IP, Ethernet, BGP, OSPF, EIGRP, IPsec, VLANs, HSRP, QoS, Multicast, ACLs, MPLS, SD-WAN, and VPN technologies.\nAdvanced troubleshooting and packet-analysis experience using PAN-OS packet diagnostics, session analysis, global counters, flow diagnostics, and Wireshark.\nExperience with SSE/SASE, Zero Trust, SWG, CASB, ZTNA, DLP, and Remote Browser Isolation, preferably using Prisma Access and Zscaler ZIA/ZPA.\nExperience securing Azure, AWS, and GCP environments using Palo Alto VM-Series, Cloud NGFW, and cloud-native controls.\nExperience integrating network security platforms with SIEM/XDR/SOAR solutions including Splunk and Google Chronicle\nAbility to independently solve complex Layer 3 through Layer 7 security problems and provide technical leadership to other engineers.\nKey Responsibilities\n1. Firewall Engineering & Architecture\nDesign, implement, and support global Palo Alto Networks firewall infrastructure, including PA-Series, VM-Series, Panorama, and Strata Cloud Manager.\nDesign resilient firewall architectures across data center, campus, manufacturing, OT, R&D, and cloud environments.\nDefine global firewall reference architectures, configuration standards, security baselines, and deployment patterns.\nEngineer HA, routing, NAT, VPN, segmentation, PBF, ECMP, VSYS, virtual routing, and multi-tenancy architectures.\nDefine Panorama device-group, template, and template-stack architectures.\nSupport Fortinet firewall infrastructure where required.\n2. Firewall Policy & Security Controls\nArchitect and govern enterprise firewall rule structures, policy hierarchy, objects, naming standards, and lifecycle processes.\nLead firewall rule base optimization and migration from port-based policies to application- and identity-based policies.\nDesign and implement App-ID, User-ID, Device-ID, Security Profiles, SSL/TLS Decryption, IPS, Advanced Threat Prevention, DNS Security, URL Filtering, and WildFire.\nReduce unused, duplicate, shadowed, overly permissive, and high-risk firewall policies.\nEstablish firewall policy recertification, ownership, change-control, and compliance processes.\nPerform configuration and security posture reviews using SCM, Palo Alto BPA/AIOps, Skybox, Tufin, and CIS benchmarks.\n3. Firewall Lifecycle & Operational Excellence\nOwn PAN-OS and FortiOS lifecycle management, software upgrades, hardware refresh, vulnerability remediation, capacity planning, and performance optimization.\nLead advanced troubleshooting of complex firewall, routing, NAT, VPN, decryption, application, and connectivity issues.\nPerform packet captures, session analysis, flow diagnostics, and Root Cause Analysis for major incidents.\nServe as a senior escalation point for critical network security incidents and infrastructure outages.\nDevelop operational standards, runbooks, health checks, KPIs, and engineering documentation.\n4. SSE, SASE & Zero Trust\nDesign and support SSE/SASE architectures leveraging Prisma Access and Zscaler ZIA/ZPA.\nEngineer SWG, CASB, ZTNA, DLP, Remote Browser Isolation, private application access, and cloud-delivered security controls.\nSupport secure remote access for employees, contractors, and third parties using identity, device posture, and Zero Trust principles.\nIntegrate security platforms with Microsoft Entra ID, Okta, SAML, SCIM, Cloud Identity Engine, EDR, and device-posture services.\nSupport modernization and replacement of legacy VPN architectures with ZTNA where appropriate.\n5. Cloud Network Security\nArchitect network security across Azure, AWS, and GCP.\nDesign and operate Palo Alto VM-Series and Cloud NGFW deployments.\nSecure hybrid-cloud traffic using Azure ExpressRoute, AWS Direct Connect, VPNs, Transit Gateway, Virtual WAN, hub-and-spoke architectures, and centralized inspection.\nImplement network segmentation and Zero Trust controls across on-premises and cloud environments.\nPartner with cloud teams to integrate firewall services with cloud-native routing, security groups, load balancers, DNS, and identity services.\n6. Security Monitoring & Incident Response\nIntegrate firewall telemetry with enterprise SIEM/XDR/SOAR platforms.\nEngineer logging and telemetry using Syslog, CEF, APIs, and cloud integrations.\nSupport security investigations, incident containment, threat analysis, and remediation.\nPartner with Security Operations to improve firewall-based detection and response capabilities.\nDevelop monitoring, dashboards, alerts, and operational security metrics.\n7. Technical Leadership & Project Delivery\nLead global initiatives including firewall modernization, segmentation, data center migrations, cloud security transformation, SSE/SASE adoption, and Zero Trust programs.\nDevelop HLDs, LLDs, implementation plans, test plans, migration plans, rollback plans, and operational runbooks.\nLead complex security projects from architecture through implementation and operational handoff.\nEvaluate new technologies, lead proof-of-concepts, and provide platform recommendations.\nMentor engineers and establish technical standards and engineering best practices.\nPresent architecture, risk, project status, and technology recommendations to IT and cybersecurity leadership.\n8. Governance, Risk & Compliance\nEnsure firewall and network security controls align with corporate security requirements and frameworks including NIST CSF, ISO 27001, CIS Controls, and applicable export-control requirements.\nLead firewall rule recertification, configuration audits, security assessments, and vulnerability-remediation activities.\nIdentify and document network security risks and drive remediation with technical and business stakeholders.\nMaintain auditable firewall standards, configuration baselines, and security-control documentation.\nFunctional Knowledge\nDemonstrates expert conceptual and practical knowledge of firewall and network security technologies with broad knowledge of networking, cloud, identity, endpoint, and security operations.\nApplies industry best practices and emerging technologies to improve enterprise network security services.\nBusiness Expertise\nUnderstands business and technical requirements within a large global enterprise and translates them into scalable, secure, resilient, and cost-effective network security solutions.\nEvaluates security, operational, technology, and business risks when making architecture decisions.\nLeadership\nProvides technical leadership and guidance to engineers and cross-functional teams.\nLeads complex global network security projects with significant technical scope and risk.\nInfluences architecture, engineering standards, security policy, and technology direction.\nProblem Solving\nSolves highly complex Layer 3 through Layer 7 network security problems.\nUses packet analysis, telemetry, logs, threat intelligence, and multiple sources of technical information to identify root cause and implement sustainable solutions.\nImpact\nDirectly impacts the security, availability, resiliency, and performance of Applied Materials' global network infrastructure and business-critical services.\nEstablishes standards and architectures that influence network security implementations across global environments.\nInterpersonal Skills\nCommunicates complex technical and security topics clearly to engineers, cybersecurity teams, application owners, business stakeholders, vendors, and leadership.\nBuilds consensus across global and cross-functional organizations.\nDemonstrates strong technical documentation and presentation skills.\nRequired Qualifications\n8+ years of enterprise Network Security Engineering experience.\n5+ years hands-on Palo Alto Networks experience in architecture, deployment, engineering, or advanced operations.\nExpert knowledge of PAN-OS, Panorama, App-ID, User-ID, NAT, SSL Decryption, Security Profiles, Threat Prevention, VPN, and security-policy management.\nStrong experience with enterprise firewall architecture, policy governance, and lifecycle management.\nExpert knowledge of TCP/IP, BGP, OSPF, routing, VPN, and network segmentation.\nAdvanced firewall troubleshooting and packet-analysis capabilities.\nExperience designing secure, highly available network architectures.\nExperience with enterprise cloud and hybrid-c...","description_format":"text","description_chars":14650,"description_truncated":true,"requirements":{"experience_years_min":8,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":{"level":"bachelor","optional":false},"security_clearance":false,"languages":[]},"benefits":["Equity"],"hiring_locations":[],"hiring_excludes":[],"relocation_offered":true,"industries":["Network Security","Semiconductor Equipment"],"lifecycle":[{"event":"open","at":"2026-11-12T19:34:04Z"}],"visa":[{"country":"US","licensed_sponsor":true,"adverts_offering_sponsorship_24m":0,"sanctioned_now":false,"evidence":"H-1B filings in 12 months: 528 · green card filings: 207","filings_12m":528,"filings_prev_12m":481,"green_card_filings_12m":207,"median_offered_wage_usd":145330,"route":null,"cap_exempt":false,"checked_at":"2026-11-12T07:36:15+00:00","sources":["US Department of Labor: LCA disclosure data (H-1B, H-1B1, E-3)","US Department of Labor: PERM disclosure data (green cards)"],"filings_for_role_12m":0}],"liveness":{"score":86,"band":"hot","label":"Hiring now","p_open":1,"p_active":0.86,"p_room":1,"age_days":3,"expected_fill_days":54,"reasons":["conf:1","win:early","comp:brand"],"computed_at":"2026-11-12T20:58:00Z"},"pay":{"stated_usd_annual":208500,"is_top_pay":true},"html_url":"https://alion.io/job/applied-materials-senior-network-security-engineer","json_url":"https://alion.io/job/applied-materials-senior-network-security-engineer.json","meta":{"generated_at":"2026-11-12T20:58:00Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":44306,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-11-13T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.1,"usd":0.01,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":3903},"rest":"https://alion.io/mcp/rest/get_company?id=3903"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Fapplied-materials-senior-network-security-engineer"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":2,"usd":0.2},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Fapplied-materials-senior-network-security-engineer"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.1,"usd":0.01},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Fapplied-materials-senior-network-security-engineer"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/applied-materials-senior-network-security-engineer\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Fapplied-materials-senior-network-security-engineer"}],"agent":{"mcp":"https://alion.io/mcp/jobs","mcp_open":"https://alion.io/mcp/open","next":[{"tool":"get_job","arguments":{"id":4191968}},{"tool":"search_jobs","arguments":{"company":"appliedmaterials.com","detail":"compact"}},{"tool":"match_people","arguments":{"job_id":4191968},"note":"people open to offers who fit this vacancy"}],"note":"The same data through MCP tools: https://alion.io/mcp/open needs no sign-in (compact searches, postings, people); https://alion.io/mcp with an Alion account has everything. Docs: https://alion.io/developers"}}