Principal Network Engineer – Global Infrastructure & Cyber Resilience

Commvault is the gold standard in cyber resilience, empowering customers to recover from cyberattacks and keep data safe. The Principal Network Engineer will lead the implementation and troubleshooting of a global network, focusing on SD-WAN, cloud connectivity, and security integration.

Responsibilities:

• Build & Deploy: Take primary responsibility for the 'First Build.' You will lead the hands-on implementation of global SD-WAN and Cloud nodes, ensuring the transition from design to production is flawless
• Deep-Dive Troubleshooting: Act as the ultimate technical escalation point. When Tier-3 hits a wall, you dive into the logs, PCAPs, and routing tables to identify and fix the root cause
• Network-as-Code: Personally develop and maintain Terraform and Ansible playbooks to automate the global environment, ensuring you are driving the execution of automation, not just suggesting it
• GCP & Azure Execution: Physically build and manage the transit gateways, VPC/VNet peering, and Cloud Interconnects that power our multi-cloud ecosystem
• SD-WAN Mastery: Take the lead in configuring Prisma Access and NGFWs. You will own the policy engine, hands-on, ensuring security is baked into every route and interface
• Zero Trust Integration: Move beyond the 'Zero Trust' buzzword by executing the actual micro-segmentation and identity-based access controls across our hybrid footprint
• Zscaler and Firewall Expert: Act as the Subject Matter Expert (SME) for Next-Generation Firewalls (NGFW), Zscaler Private Access (ZPA) and Zero Trust Network Access (ZTNA). Own the global policy sets, SSL decryption strategies, and threat prevention profiles
• Hybrid Connectivity: Manage complex Site-to-Site VPNs, GRE tunnels, and high-speed interconnects that link our global data centers with public cloud regions
• Strategic Influence: Partner with the CISO and Director of Infrastructure to align networking goals with broader business initiatives
• Technical Mentorship: Lead and upskill a global team of senior and mid-level engineers. Conduct architectural reviews and set the 'gold standard' for documentation and code-based infrastructure
• Vendor Management: Lead technical evaluations and QBRs with key partners (Google, Microsoft, Palo Alto), ensuring Commvault is leveraging the latest features and optimal pricing
• Lead by Example: Set the technical standard for the engineering team by demonstrating best practices in configuration, documentation, and operational discipline
• Executive Communication: Translate complex technical 'war stories' and execution hurdles into concise executive summaries for leadership, providing clear paths for risk mitigation
• Infrastructure as Code (IaC): Champion a 'Network-as-Code' mindset using Terraform, Ansible, or Python to automate repetitive tasks and ensure 100% configuration consistency
• Operational Resilience: Own Tier-4 escalations for complex network outages. Lead Root Cause Analysis (RCA) sessions that translate technical failures into actionable business improvements

Requirements:

• 12+ years in Network Engineering, with a career path that proves you have never lost your 'hands-on' edge
• Preferably in New Jersey to help own the hardware in the corporate data center
• Proven ability to build, operate, and troubleshoot complex environments across Palo Alto (PCNSE level), GCP, and Azure
• Direct experience deploying Zscaler SD-WAN and implementing ZTNA frameworks in a global enterprise
• Expert-level mastery of BGP, EVPN/VXLAN, and stateful firewalling
• High proficiency in Python or Terraform for infrastructure deployment
• The ability to command a room of executives while being the most technical person on a bridge call
• Exceptional written and verbal skills. You can explain the 'why' behind a $2M infrastructure investment to a Board of Directors just as easily as you can debug a packet drop with an engineer
• Zscaler: ZTDA or ZTDE
• Cloud: Google Professional Cloud Network Engineer or Azure Network Engineer Associate (AZ-700)
• General: CCIE (Route/Switch or Security) is highly valued but not required if equivalent experience is demonstrated