Sr Principal Engineer Software (NGFW) – NetSec

Overview

Senior Principal Software Engineer in the NGFW group, building enterprise-managed device firmware and the next-generation platform powering the security stack. Serves as the primary technical interface between PANW and hardware teams.

What you'll do

• Own the device firmware platform, including kernel configuration, package management, and image build pipelines using partner SDKs.
• Maintain and extend the cloud device agent, managing WebSocket connections, ZTP onboarding, and telemetry reporting.
• Integrate the PANW SCM cloud agent into the firmware for device registration, configuration sync, and telemetry export.
• Drive board bring-up for new device hardware generations, including bootloader, device tree, and driver integration.
• Serve as the primary technical liaison to hardware teams, triaging issues, reviewing firmware, and negotiating BOM changes.
• Manage firmware signing and secure boot processes, validating attestation flows from SCM.
• Maintain the device configuration schema and site template repository, syncing with the controller API contract.
• Build and deploy advanced networking and security capabilities on the platform.

What you'll need

• BS or MS degree in Computer Science, Engineering, or a related technical field, or equivalent practical experience.
• Minimum of 15 years of experience in network driver or firmware development.
• Deep expertise in Linux kernel networking driver frameworks and vendor SDK integration.
• Hands-on experience with embedded networking SoCs and vendor SDK or driver stacks.
• Strong proficiency in C programming, with experience in kernel and driver debugging under hardware constraints.
• Strong experience in packet processing, parsing, and networking (L2-L4) protocols and architecture.
• Experience in data plane forwarding and network processor programming.
• Proficiency in shell scripting and Python for build automation.
• Strong understanding of next-generation networking standards at the frame and protocol level.

Nice to have

• Open-source Linux kernel driver experience.
• Familiarity with netfilter, iptables, or eBPF for data path integration.
• Working knowledge of secure boot chains, firmware signing, and TPM integration.
• Experience in DPDK packet processing and performance tuning.

Details

• Office-based role in Bangalore, India (Bagmane Tech Park).
• Most teams work from the office full time, with flexibility when needed.
• Not eligible for immigration sponsorship.