Senior Network Engineer I [T500-20294]

About Marriott:

Marriott Tech Accelerator is part of Marriott International, a global leader in hospitality. Marriott International, Inc. is a leading American multinational company that operates a vast array of lodging brands, including hotels and residential properties. It consists of over 30 well-known brands and nearly 8,900 properties situated in 141 countries and territories.

Role Title: Senior Network Engineer I

Position Summary:

As a member of the Global Network- Enterprise Network Team, this position will be part of the newly formed Firewall Center of Excellence (CoE). This CoE will focus on design, policy architecture, delivery and overall operational excellence across the Enterprise Network product teams for Enterprise Offices, Zero Trust Networking, and Cloud Networking. The successful candidate will have strong knowledge of Palo Alto Network firewalls: NGFW, Cloud Appliance, Cloud Native, and FWaaS (Prisma Access).

This is a hands-on technical position that requires strong engineering discipline, a DevSecOps mindset, and the ability to drive security and compliance standards across the enterprise firewall infrastructure.

Job Responsibilities:

Technology Design & Implementation:

• Manage, design and deploy Palo Alto NGFWs, Panorama, and Prisma Access solutions across data centers, cloud, and edge locations
• Implement centralized policy management and visibility using Panorama and Strata Cloud Manager
• Define standard rule sets, service groups, objects, and tagging schemes for policy enforcement

Operations & Support:

• Provide Level 2/Level 3 support for firewall rule issues, incidents, and tuning including authoring and/or peer reviewing Change playbooks
• Maintain documentation including runbooks, diagrams, standard operating procedures
• Monitor and optimize firewall performance, rule efficiency, and high availability

Governance & Compliance:

• Drive firewall rule review and recertification programs
• Support audit and compliance efforts for segmentation, PCI, and other standards

Collaboration:

• Partner with assigned Enterprise Network Product team to support service delivery
• Contribute to playbooks and onboarding guides
• Participate in roadmap planning, vendor evaluations, and emerging technology pilots

Relevant Technologies & Tools:

• Firewall Platforms: Palo Alto NGFW, Panorama, Prisma Access, Strata Cloud Manager, Cloud Firewall Services and Solutions for AWS, Azure, OCI, GCP and AliCloud
• Cloud & Networking: AWS VPC, Security Groups, NACLs, Transit Gateway, Internet Gateway, Direct Connect
• Security Services: Palo Alto Threat Prevention, URL Filtering, WildFire, Decryption Policies
• Infrastructure-as-Code: Terraform, Ansible, GitHub Actions
• Logging & Monitoring: Panorama Logs, Prisma Insights, AWS CloudWatch, Splunk, SNMP, packet captures
• Networking Protocols: BGP, IPsec, GRE, SSL/TLS, DNS, NAT, PBF
• Compliance & IAM: RBAC, segmentation policy, Zero Trust Architecture, PCI-DSS

Additional duties as may be assigned:

Skill and Experience :

• 4+ years of progressive experience in Network/Network Security Engineering with a solid understanding of standard routing and switching protocols
• Explicit experience with Palo Alto firewalls (NGFW), Panorama, Prisma Access, and Threat Prevention features
• Solid understanding and experience with Palo Alto Panorama; knowledge and experience of Strata Cloud Manager is a plus
• Experience managing firewalls in hybrid/multi-cloud environments specifically with AWS; experience with Azure, AliCloud and GCP is a plus
• Advanced knowledge of firewall rule lifecycle, security zoning, application-based policies, NAT rules, and policy-based routing
• Experience with Infrastructure-as-Code (e.g., Terraform, Ansible) for firewall automation
• Experience with log analysis, packet capture, and troubleshooting tools

Other Skills and Attributes:

• Experience working with security operations, audits, and compliance teams
• Familiarity with global segmentation architectures, Zero Trust principles, and East-West inspection
• Strong influencing skills and the ability to overcome barriers while driving change through collaboration.
• Excellent verbal and written communication skills.
• Solid understanding of Agile SAFe
• Strong attention to detail with the ability to operate effectively across multiple priorities.

Education and Certifications:

• Bachelor’s degree in computer science or related technical field experience/certification
• Certifications: PCNSE, AWS Advanced Networking, CCNP Security

Work location:

Work mode: