Staff IT Systems Engineer Windows and Linux Administration PKI

Your Career

Palo Alto Networks is looking for a talented Senior Systems Engineer with strong exposure to Linux Windows and a good understanding of PKI who will be responsible for maintainability build and configuration of our Windows Linux and PKI platform using Infrastructure as Code. As Staff IT Systems Engineer you will support Tier3 engineering for Linux & Windows build and configuration automation along with PKI domain and related technologies.

Server infrastructure is the backbone of the business and hosts critical services spread across the business landscape. PKI infra provides critical services that enhance secure and trustworthy communications between applications services and users. The ideal candidate enjoys working in a fastpaced environment with highly innovative technologies. You will make a big impact in this highly visible role by building PKI as a service offering for our customers.

Your Impact

• Implementing and supporting the Windows servers Active Directory and DNS  in the cloud infrastructure
• Provision configure & support resilient cloud deployment architecture
• Manage scalability capacity planning redundancy and resiliency
• Maintain service availability and performance SLAs based on business and product requirements
• Patching and remediating known vulnerabilities across the landscape
• Manage Windows infrastructure work with other Identity Platform engineers in deploying and maintaining services capacity planning create and review operational runbooks
• Partner with IT and product teams for services integration
• Contribute to documentation related to design deployment validation operations and DR/BCP
• Design proactive service monitoring alerting and trend analysis of underlying infrastructure and automate the service recovery process
• Implementing and supporting the PKI Linux infrastructure as code where our globally distributed customerfacing PKI platform runs. 
• Provision configure & support resilient hybrid cloud deployment architecture using the automation framework and make it more efficient
• Manage scalability capacity planning redundancy and resiliency.
• Maintain service availability and performance SLAs based on business and product requirements.
• Manage Linux and container infrastructure CI/CD platform specifically for PKI work with other SREs in deploying and maintaining automation framework capacity planning create and review PKI operational runbooks..
• Contribute to documentation related to design deployment validation operations and DR/BCP.
• Design proactive service monitoring alerting and trend analysis of underlying infrastructure and support the operations team in implementation.

Qualifications :

Your Experience 

• 610 years of handson experience in Windows and Linux Administration. 
• Deep knowledge of Windows and Linux Operating Systems Windows Server and various Linux distributions Tools and Technologies: Expertise in DFS MSSQL NAS SQL Cluster Management IIS Web Server Powershell Windows Server Management Group Policy Objects (GPO) and Microsoft Active Directory nginx httpd apache and tomcat Technical
• Excellent Shell scripting Powershell and migration skills 
• Strong experience in managing and supporting Linux server infrastructure in CentOS/RHEL/Ubuntu.
• Capable to automate tasks with programing like Python shell scripting or Golang
• Understanding of NIST IEEE FIPS security standards. NIST 180016 NIST 80052 RFC5280..
• Experience in configuring and supporting Certificate Authority OCSP and HSM solutions
• Experience with KeyFactor EJBCA and HSMs (preferably Thales)
• Handson experience in managing and supporting Microsoft technologies on Windows Operating System Active Directory and Azure
• Fluent in Windows security & system hardening vulnerability management & patching process
• Experience with DFS MSSQL NAS SQL Cluster management IIS Web Server Powershell Windows server management GPO Microsoft AD Migrating the application and its dependency to latest version of windows server 
• Indepth knowledge of Linux & Windows infrastructure
• Experience in configuring and supporting Azure Active Directory
• Experience in managing privileged access management platforms like Delinea CyberArk
• Strong GCP compute and kubernetes engine knowledge
• Indepth knowledge of Certificate Lifecycle Management
• Experience in configuring and supporting HashiCorp Vault (HCP)
• Design and performance tuning for Linux infrastructure and API indepth knowledge of multitier web applications.
• Experience in developing  and managing APIs understanding of API infrastructure optimization and security.
• Fluent in Linux security & system hardening vulnerability management & patching process. Familiarity with CIS compliance levels.
• Must be comfortable with Ansible Chef or similar configuration management tool to manage infrastructure as code and source code control systems such as GIT or SVN.
• Ability to work crossfunctionally across multiple business units such as product development and engineering
• Must be able to collaborate with a global team spread across multiple time zones 
• Strong technical writing skills to support required documentation
• Bachelors/Masters degree in Computer Science Information Technology or technical stream with the equivalent combination of work experience required.

Additional Information :

The Team

This is not a traditional IT department!  We partner closely with our security engineering and product teams to secure our state of the art cyber security solutions

Working at a hightech cybersecurity company within Information Technology is a once in a lifetime opportunity. Youll be joined with the brightest minds in technology creating building and supporting tools that enable our global teams on the front line of defense against cyberattacks. Were joined by one mission but driven by the impact of that mission and what it means to protect our way of life in the digital age. Join a dynamic and fastpaced team that feels excitement at the prospect of a challenge and feels a thrill at resolving technical gaps that inhibit productivity.

Our Commitment

Were trailblazers that dream big take risks and challenge cybersecuritys status quo. Its simple: we cant accomplish our mission without diverse teams innovating together.

We are committed to providing reasonable accommodations for all qualified individuals with a disability. If you require assistance or accommodation due to a disability or special need please contact us at .

Palo Alto Networks is an equal opportunity employer. We celebrate diversity in our workplace and all qualified applicants will receive consideration for employment without regard to age ancestry color family or medical care leave gender identity or expression genetic information marital status medical condition national origin physical or mental disability political affiliation protected veteran status race religion sex (including pregnancy) sexual orientation or other legally protected characteristics.

All your information will be kept confidential according to EEO guidelines.

Our Commitment

Were problem solvers that take risks and challenge cybersecuritys status quo. Its simple: we cant accomplish our mission without diverse teams innovating together.

We are committed to providing reasonable accommodations for all qualified individuals with a disability. If you require assistance or accommodation due to a disability or special need please contact us at  .

Palo Alto Networks is an equal opportunity employer. We celebrate diversity in our workplace and all qualified applicants will receive consideration for employment without regard to age ancestry color family or medical care leave gender identity or expression genetic information marital status medical condition national origin physical or mental disability political affiliation protected veteran status race religion sex (including pregnancy) sexual orientation or other legally protected characteristics.

All your information will be kept confidential according to EEO guidelines.

Covid19 Vaccination Information for Palo Alto Networks Jobs

• Vaccine requirements and disclosure obligations vary by country.
• Unless applicable law requires otherwise you must be vaccinated for COVID or qualify for a reasonable accommodation if:
  • The job requires accessing a company worksite
  • The job requires inperson customer contact and the customer has implemented such requirements
  • You choose to access a Palo Alto Networks worksite
• If you have questions about the vaccine requirements of this particular position based on your location or job requirements please inquire with the recruiter.