{"id":1895799,"url":"https://alion.io/job/nike-senior-infrastructure-engineer-2","title":"Senior Infrastructure Engineer","company":{"id":1634,"name":"Nike","domain":"nike.com","url":"https://alion.io/company/nike","size_band":"1001-5000","is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"Workday","truth_index":null},"role":"DevOps","role_family":"DevOps","seniority":"senior","employment_type":"full_time","work_mode":"on_site","remote_scope":null,"remote_scope_basis":null,"remote_working_hours":null,"hiring_geo_confidence":"structured","locations":["India"],"countries":["IN"],"hiring_countries":[],"hiring_countries_total":0,"salary":null,"salary_estimate":{"min_usd":19500,"max_usd":42000,"period":"year","method":"role_seniority_country_remote_cell","sample_n":38},"experience_years_min":5,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"Ansible","optional":false},{"name":"Azure DevOps","optional":false},{"name":"CI/CD","optional":false},{"name":"Configuration Management","optional":false},{"name":"DHCP","optional":false},{"name":"DNS","optional":false},{"name":"GDPR","optional":false},{"name":"Git","optional":false},{"name":"GitHub Actions","optional":false},{"name":"GitLab CI","optional":false},{"name":"ITSM","optional":false},{"name":"Jenkins","optional":false},{"name":"Palo Alto NGFW","optional":false},{"name":"Platform Engineering","optional":false},{"name":"Python","optional":false},{"name":"Rest API","optional":false},{"name":"SIEM","optional":false},{"name":"Splunk","optional":false},{"name":"TCP/IP","optional":false},{"name":"Terraform","optional":false},{"name":"Zero Trust","optional":false},{"name":"Azure","optional":true}],"status":"live","first_seen_at":"2026-10-05T08:19:12Z","employer_posted_date":"2026-10-05","last_verified_at":"2026-10-12T23:32:59Z","board_verified":true,"closed_at":null,"days_open":7,"trust":{"level":"ok","repost_count":null,"flags":[],"days_open":7},"description":"WHO YOU’LL WORK WITH\nAs a Senior Firewall Engineer (Level 3), you will provide expert-level technical engineering and design for enterprise network security infrastructure. You will be responsible for working complex firewall deployments, handling high-level tier-3 troubleshooting, and driving innovation in advanced cloud firewall capabilities. This role requires an expert understanding of network security principles, deep hands-on technical experience with enterprise firewall technologies, and the ability to solve complex infrastructure challenges. Primary customers and peer groups will be Core Infrastructure Engineering, Corporate Information Security, and Nike Operations Center\nWHO WE ARE LOOKING FOR\nThe ideal candidate brings strong enterprise network security expertise combined with an engineering mindset focused on automation, platform scalability, and operational excellence. This individual should possess deep technical knowledge of Palo Alto security platforms, cloud security architectures, security automation, and modern software engineering practices. The candidate will play a critical role in designing, building, automating, and supporting Nike's next-generation Network Security Platform while contributing to Firewall-as-Code, Zero Trust, and cloud security transformation initiatives.\n5+ years of experience in Network Security Engineering with demonstrated expertise in enterprise-scale network security environments.\n\nDeep hands-on expertise with Palo Alto Networks NGFW, Panorama, Log Collectors, Device Groups, Template Stacks, and enterprise firewall architectures.\n\nStrong understanding of enterprise networking fundamentals including routing, switching, TCP/IP, DNS, DHCP, WAN, cloud networking, and application traffic flows.\n\nHands-on experience with Cloud NGFW, Prisma Access (SASE/SSE), and modern cloud-delivered security platforms.\n\nExperience designing and supporting SSL/TLS decryption solutions at scale, with an understanding of privacy and regulatory requirements including GDPR, DPDP, and CCPA.\n\nExperience with Network Access Control platforms such as Cisco ISE, including TACACS+, RADIUS, posture assessment, profiling, and identity-based access controls.\n\nStrong understanding of Zero Trust principles, identity-aware security policies, network segmentation, and micro-segmentation strategies.\n\nAdvanced troubleshooting capabilities including packet captures, session analysis, flow analysis, log correlation, performance troubleshooting, and root cause analysis.\n\nExperience integrating firewall telemetry and operational data with Panorama, Splunk, SIEM platforms, and enterprise observability solutions.\n\nStrong proficiency in Python development for automation, API integrations, workflow orchestration, and operational tooling.\n\nExperience working with REST APIs, JSON, YAML, and API-driven infrastructure automation.\n\nProficiency with Git-based development workflows including branching strategies, pull requests, code reviews, and version control best practices.\n\nHands-on experience with automation technologies such as Ansible, Terraform, and Infrastructure-as-Code methodologies.\n\nExperience building and supporting CI/CD pipelines using GitHub Actions, Jenkins, Azure DevOps, GitLab CI, or similar technologies.\n\nUnderstanding of software development lifecycle (SDLC), testing methodologies, release management, and engineering best practices.\n\nExperience building reusable automation services, engineering tools, and platform capabilities that improve operational efficiency and engineering productivity.\n\nUnderstanding of Firewall-as-Code, Policy-as-Code, and Infrastructure-as-Code concepts and implementation patterns.\n\nExperience leveraging telemetry, monitoring, and observability platforms to improve operational visibility and platform reliability.\n\nStrong understanding of service health monitoring, alerting strategies, troubleshooting workflows, and operational analytics.\n\nWHAT YOU’LL WORK ON\nYou will be responsible for designing, engineering, automating, and operating Nike's global Network Security Platforms. As a Senior Network Security Platform Engineer, you will serve as a key technical contributor driving Firewall-as-Code, Zero Trust, cloud security, observability, and security automation initiatives. You will partner closely with security architects, cloud engineers, platform engineers, and infrastructure teams to build scalable, reliable, and automation-first security services.\nServe as a senior technical engineer within the Network Security Platform team, delivering secure, scalable, and highly available firewall solutions across global environments.\n\nDesign, deploy, and support Palo Alto NGFW, Panorama, Cloud NGFW, and Prisma Access solutions while ensuring adherence to architectural standards and security best practices.\n\nLead complex Tier-3 troubleshooting activities involving network connectivity, application flows, security policy enforcement, SSL decryption, routing, and cloud integrations.\n\nDevelop production-grade technical documentation, including High-Level Designs (HLDs), Low-Level Designs (LLDs), implementation plans, operational runbooks, and Root Cause Analysis (RCA) reports.\n\nDesign and implement Firewall-as-Code capabilities leveraging Git-based workflows, Infrastructure-as-Code principles, APIs, and automation frameworks.\n\nBuild and maintain Python-based automation solutions to automate firewall policy management, configuration deployment, compliance validation, and operational workflows.\n\nDevelop reusable automation modules, frameworks, and self-service capabilities that reduce manual effort and improve engineering efficiency.\n\nIntegrate firewall platforms with enterprise systems including ITSM, CMDB, observability, and orchestration platforms through API-driven automation.\n\nImplement Policy-as-Code and automated validation frameworks to improve change quality and deployment consistency\n\nContribute to Infrastructure-as-Code implementations using Terraform, Ansible, and related automation technologies.\n\nBuild and support CI/CD pipelines for firewall policy deployment, platform configuration management, and security automation workflows.\n\nParticipate in code reviews, testing, release management, and engineering governance processes to maintain high-quality engineering standards.\n\nCollaborate with platform engineering teams to integrate network security capabilities into enterprise DevSecOps pipelines.\n\nSupport Nike's Zero Trust initiatives through network segmentation, identity-aware security policies, micro-segmentation, and secure access architectures.\n\nEvaluate and implement cloud-native security services, SASE/SSE technologies, and emerging cloud firewall capabilities.\n\nPreferred Qualification / Nice to Have:\nPCNSE / CCNP security certification\n\nCCNA Routing & Switching certification\n\nAny cloud provider certification\n\nCoding language (Other than python, Ansible, if any)","description_format":"text","description_chars":6931,"description_truncated":false,"requirements":{"experience_years_min":5,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":null,"security_clearance":false,"languages":[]},"benefits":[],"hiring_locations":[],"hiring_excludes":[],"relocation_offered":false,"industries":["Footwear","Sporting Goods","Sportswear & Activewear"],"lifecycle":[{"event":"open","at":"2026-10-05T08:19:12Z"}],"visa":[],"liveness":{"score":72,"band":"hot","label":"Hiring now","p_open":1,"p_active":0.802,"p_room":0.9,"age_days":6,"expected_fill_days":10,"reasons":["conf:1","velocity","win:mid","comp:brand"],"computed_at":"2026-10-12T06:55:09Z"},"pay":null,"html_url":"https://alion.io/job/nike-senior-infrastructure-engineer-2","json_url":"https://alion.io/job/nike-senior-infrastructure-engineer-2.json","meta":{"generated_at":"2026-10-13T00:29:24Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":782,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-10-14T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.02,"usd":0.002,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":1634},"rest":"https://alion.io/mcp/rest/get_company?id=1634"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Fnike-senior-infrastructure-engineer-2"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":1,"usd":0.1},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Fnike-senior-infrastructure-engineer-2"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.02,"usd":0.002},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Fnike-senior-infrastructure-engineer-2"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/nike-senior-infrastructure-engineer-2\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Fnike-senior-infrastructure-engineer-2"}]}