Job Information
Palo Alto Networks Staff IT Systems Engineer (Windows and Linux Administration, PKI) in Bangalore, India
Our Mission
At Palo Alto Networks® everything starts and ends with our mission:
Being the cybersecurity partner of choice, protecting our digital way of life.
Our vision is a world where each day is safer and more secure than the one before. We are a company built on the foundation of challenging and disrupting the way things are done, and we’re looking for innovators who are as committed to shaping the future of cybersecurity as we are.
Who We Are
We take our mission of protecting the digital way of life seriously. We are relentless in protecting our customers and we believe that the unique ideas of every member of our team contributes to our collective success. Our values were crowdsourced by employees and are brought to life through each of us everyday - from disruptive innovation and collaboration, to execution. From showing up for each other with integrity to creating an environment where we all feel included.
As a member of our team, you will be shaping the future of cybersecurity. We work fast, value ongoing learning, and we respect each employee as a unique individual. Knowing we all have different needs, our development and personal wellbeing programs are designed to give you choice in how you are supported. This includes our FLEXBenefits wellbeing spending account with over 1,000 eligible items selected by employees, our mental and financial health resources, and our personalized learning opportunities - just to name a few!
At Palo Alto Networks, we believe in the power of collaboration and value in-person interactions. This is why our employees generally work full time from our office with flexibility offered where needed. This setup fosters casual conversations, problem-solving, and trusted relationships. Our goal is to create an environment where we all win with precision.
Your Career
Palo Alto Networks is looking for a talented Senior Systems Engineer with strong exposure to Linux, Windows and a good understanding of PKI, who will be responsible for maintainability, build, and configuration of our Windows, Linux and PKI platform using Infrastructure as Code. As Staff IT Systems Engineer, you will support Tier-3 engineering for Linux & Windows build and configuration automation along with PKI domain and related technologies.
Server infrastructure is the backbone of the business and hosts critical services spread across the business landscape. PKI infra provides critical services that enhance secure and trustworthy communications between applications, services, and users. The ideal candidate enjoys working in a fast-paced environment with highly innovative technologies. You will make a big impact in this highly visible role by building PKI as a service offering for our customers.
Your Impact
Implementing and supporting the Windows servers, Active Directory and DNS in the cloud infrastructure
Provision, configure & support resilient cloud deployment architecture
Manage scalability, capacity planning, redundancy, and resiliency
Maintain service availability and performance SLAs based on business and product requirements
Patching and remediating known vulnerabilities across the landscape
Manage Windows infrastructure, work with other Identity Platform engineers in deploying and maintaining services, capacity planning, create and review operational runbooks
Partner with IT and product teams for services integration
Contribute to documentation related to design, deployment, validation, operations and DR/BCP
Design proactive service monitoring, alerting and trend analysis of underlying infrastructure, and automate the service recovery process
Implementing and supporting the PKI Linux infrastructure as code where our globally distributed customer-facing PKI platform runs.
Provision, configure & support resilient hybrid cloud deployment architecture using the automation framework and make it more efficient
Manage scalability, capacity planning, redundancy, and resiliency.
Maintain service availability and performance SLAs based on business and product requirements.
Manage Linux and container infrastructure CI/CD platform specifically for PKI, work with other SREs in deploying and maintaining automation framework, capacity planning, create and review PKI operational runbooks..
Contribute to documentation related to design, deployment, validation, operations and DR/BCP.
Design proactive service monitoring, alerting and trend analysis of underlying infrastructure, and support the operations team in implementation.
Your Experience
6-10 years of hands-on experience in Windows and Linux Administration.
Deep knowledge of Windows and Linux Operating Systems, Windows Server and various Linux distributions Tools and Technologies: Expertise in DFS, MSSQL, NAS, SQL Cluster Management, IIS Web Server, Powershell, Windows Server Management, Group Policy Objects (GPO), and Microsoft Active Directory, nginx, httpd apache and tomcat Technical
Excellent Shell scripting, Powershell and migration skills
Strong experience in managing and supporting Linux server infrastructure in CentOS/RHEL/Ubuntu.
Capable to automate tasks with programing like Python, shell scripting or Golang
Understanding of NIST, IEEE, FIPS security standards. NIST 1800-16, NIST 800-52, RFC5280,..
Experience in configuring and supporting Certificate Authority, OCSP, and HSM solutions
Experience with KeyFactor EJBCA and HSMs (preferably Thales)
Hands-on experience in managing and supporting Microsoft technologies on Windows Operating System, Active Directory and Azure
Fluent in Windows security & system hardening, vulnerability management & patching process
Experience with DFS, MSSQL, NAS, SQL Cluster management, IIS Web Server, Powershell, Windows server management, GPO, Microsoft AD Migrating the application and its dependency to latest version of windows server
In-depth knowledge of Linux & Windows infrastructure
Experience in configuring and supporting Azure Active Directory
Experience in managing privileged access management platforms like Delinea, CyberArk
Strong GCP compute and kubernetes engine knowledge
In-depth knowledge of Certificate Lifecycle Management
Experience in configuring and supporting HashiCorp Vault (HCP)
Design and performance tuning for Linux infrastructure and API, in-depth knowledge of multi-tier web applications.
Experience in developing and managing APIs, understanding of API infrastructure optimization and security.
Fluent in Linux security & system hardening, vulnerability management & patching process. Familiarity with CIS compliance levels.
Must be comfortable with Ansible, Chef or similar configuration management tool to manage infrastructure as code and source code control systems such as GIT or SVN.
Ability to work cross-functionally across multiple business units, such as product development and engineering
Must be able to collaborate with a global team spread across multiple time zones
Strong technical writing skills to support required documentation
Bachelors/Masters degree in Computer Science, Information Technology or technical stream with the equivalent combination of work experience required.
The Team
This is not a traditional IT department! We partner closely with our security, engineering and product teams, to secure our state of the art cyber security solutions
Working at a high-tech cybersecurity company within Information Technology is a once in a lifetime opportunity. You’ll be joined with the brightest minds in technology, creating, building, and supporting tools that enable our global teams on the front line of defense against cyberattacks. We’re joined by one mission – but driven by the impact of that mission and what it means to protect our way of life in the digital age. Join a dynamic and fast-paced team that feels excitement at the prospect of a challenge and feels a thrill at resolving technical gaps that inhibit productivity.
Our Commitment
We’re trailblazers that dream big, take risks, and challenge cybersecurity’s status quo. It’s simple: we can’t accomplish our mission without diverse teams innovating, together.
We are committed to providing reasonable accommodations for all qualified individuals with a disability. If you require assistance or accommodation due to a disability or special need, please contact us at accommodations@paloaltonetworks.com .
Palo Alto Networks is an equal opportunity employer. We celebrate diversity in our workplace, and all qualified applicants will receive consideration for employment without regard to age, ancestry, color, family or medical care leave, gender identity or expression, genetic information, marital status, medical condition, national origin, physical or mental disability, political affiliation, protected veteran status, race, religion, sex (including pregnancy), sexual orientation, or other legally protected characteristics.
All your information will be kept confidential according to EEO guidelines.
Our Commitment
We’re problem solvers that take risks and challenge cybersecurity’s status quo. It’s simple: we can’t accomplish our mission without diverse teams innovating, together.
We are committed to providing reasonable accommodations for all qualified individuals with a disability. If you require assistance or accommodation due to a disability or special need, please contact us at accommodations@paloaltonetworks.com .
Palo Alto Networks is an equal opportunity employer. We celebrate diversity in our workplace, and all qualified applicants will receive consideration for employment without regard to age, ancestry, color, family or medical care leave, gender identity or expression, genetic information, marital status, medical condition, national origin, physical or mental disability, political affiliation, protected veteran status, race, religion, sex (including pregnancy), sexual orientation, or other legally protected characteristics.
All your information will be kept confidential according to EEO guidelines.
Covid-19 Vaccination Information for Palo Alto Networks Jobs
Vaccine requirements and disclosure obligations vary by country.
Unless applicable law requires otherwise, you must be vaccinated for COVID or qualify for a reasonable accommodation if:
The job requires accessing a company worksite
The job requires in-person customer contact and the customer has implemented such requirements
You choose to access a Palo Alto Networks worksite
If you have questions about the vaccine requirements of this particular position based on your location or job requirements, please inquire with the recruiter.
Palo Alto Networks
- Palo Alto Networks Jobs