Principal Network Engineer

Procore Technologies is the leading technology partner for every stage of construction. We empower construction teams to drive efficiency and mitigate risk through actionable AI & data-driven insights. For over 20 years, we have been transforming the industry with purpose-built solutions for construction professionals and we’re looking for talented people to help us build together.

We are looking for a Staff Network Engineer to serve as the technical lead for Procore's corporate network across on-premises and cloud environments. As the Staff Network Engineer on our IT Infrastructure team , you will work closely with Security, Cloud/Platform Engineering, IT leadership, and external partners to establish reference architectures, advance our Zero Trust/SASE strategy, and build scalable network automation. Your strengths in enterprise network architecture, Zero Trust/SASE platforms (Zscaler ZIA/ZPA), and cloud networking infrastructure will drive your success.

You will report to the Manager of Network Engineering and will be based in our Carpinteria, CA office.

What You’ll Do

• •Own the long-term technical direction, multi-year roadmap, and reference architecture for Procore's global network footprint across corporate offices, data centers, and multi-cloud IaaS environments.
• •Lead the architectural evolution and operational maturity of our enterprise SASE/SSE platform (Zscaler ZIA and ZPA), transitioning legacy perimeter access to a secure, least-privilege Zero Trust Network Access (ZTNA) model.
• •Partner with Identity, InfoSec, and Platform teams to integrate network access controls with identity providers (SAML/SCIM), device posture validation, and SIEM logging pipelines.
• •Drive network automation and infrastructure-as-code initiatives, engineering scalable tooling that reduces operational toil and enforces consistent configuration standards across global environments.
• •Serve as the principal escalation authority for critical network incidents, directing root-cause investigations and implementing durable architectural remediations.
• •Mentor and elevate network engineering team members through technical design reviews, knowledge sharing, and establishing best-in-class operational standards.
• •Conduct vendor evaluations and technology assessments to deliver well-reasoned build-versus-buy recommendations aligned with enterprise compliance, capacity, and performance requirements.

What You Bring

• •Extensive enterprise network engineering experience designing, deploying, and operating highly available routing (BGP, OSPF), switching, SD-WAN, and hybrid cloud network topologies.
• •Proven hands-on production expertise architecting and administering SASE/ZTNA platforms at enterprise scale, with deep knowledge of Zscaler ZIA and ZPA (or comparable platforms such as Palo Alto Prisma Access, Netskope, or Cloudflare One).
• •Strong technical background in multi-cloud networking (AWS and/or Azure/GCP), including transit gateway design, VPC/VNet peering, direct interconnects, and hybrid cloud connectivity.
• •Demonstrated capability with network automation and infrastructure-as-code tooling (e.g., Python, Ansible, Terraform) to manage distributed network state programmatically.
• •In-depth understanding of enterprise security engineering, including next-generation firewalls, TLS/SSL inspection, PKI/cryptography in transit, microsegmentation, and zero-trust policies.
• •Strong cross-functional leadership and communication skills, with a track record of driving consensus on complex technical architectures across IT, Engineering, and Security teams.
• •Bachelor's degree in Computer Science, Management Information Systems, or a related technical field, or equivalent practical work experience; advanced industry certifications (e.g., CCIE/CCNP, ZDTA/ZDTE, or Cloud Network Specialties) are a plus.

Strong-fit Background Might Include

• •Enterprise Network Architect or Principal Network Engineer specializing in global SASE/Zero Trust migrations
• •Cloud Network Infrastructure Engineer bridging enterprise data centers with AWS/Azure hybrid environments
• •Network Security Engineer with extensive production experience scaling Zscaler (ZIA/ZPA) and identity-aware proxy architectures
• •Network Automation Engineer with deep expertise in Python, Terraform, and automated configuration compliance

Discover our recruiting process and interview tips from our talent acquisition team on our #LifeAtProcore blog .

Additional Information

Base Pay Range:

127,680.00 - 175,560.00 USD Annual

This role may also be eligible for Equity Compensation and/or Bonus Incentive Compensation. Procore is committed to offering competitive, fair, and commensurate compensation. Actual compensation will be based on a candidate’s job-related skills, experience, education or training, and location.

For Los Angeles County (unincorporated) Candidates:

Procore will consider for employment all qualified applicants, including those with arrest or conviction records, in accordance with the requirements of applicable federal, state, and local laws, including the City of Los Angeles’ Fair Chance Initiative for Hiring Ordinance, the Los Angeles County Fair Chance Ordinance for Employers, and the California Fair Chance Act.

A criminal history may have a direct, adverse, and negative relationship on the following job duties, potentially resulting in the withdrawal of the conditional offer of employment: 1. appropriately managing, accessing, and handling confidential information including proprietary and trade secret information, as well as accessing Procore's information technology systems and platforms; 2. interacting with and occasionally having unsupervised contact with internal/external customers, stakeholders, and/or colleagues; and 3. exercising sound judgment.