Job Summary
As a Distinguished Engineer you will be the chief architect and technical authority for Palo Alto Networks' access agent platform.
You will own the unified architectural vision across our core endpoint clients including GlobalProtect, Prisma Access Agent, ADEM, and many others spanning Windows, macOS, Linux, iOS, and Android.
In this high-visibility role, you will lead the evolution of our endpoint portfolio from distinct product agents into a unified, high-performing platform foundation. By establishing shared networking, IPC, core application logic, and observability layers, you will ensure that every capability and performance optimization built in one agent automatically powers them all. Furthermore, you will define how endpoint software is engineered in an AI-native world embedding automated defect verification, intelligent telemetry analysis, and smart crash triage into our global release pipeline.
This is a high-leverage "build-the-foundation" role with direct executive sponsorship, a clear evidence-backed mandate, and an organization ready to execute under your vision.
Your Impact
•Define the Platform Architecture: Architect a high-performance, modular core for networking, crypto, configuration, and telemetry that sibling products configure rather than rebuild.
•Establish Secure Seams & Extensions: Create localized plugin models so that new auth methods, protocol extensions, or tunnel types land once and become immediately available across all platforms.
•Systemic Quality & Reliability by Design: Own the endpoint architecture standardizing peer identity, least-privilege decomposition, resilient error handling, and memory safety directly into type systems and CI/CD gates.
•Pioneer AI-Native Workflows & Supportability: Integrate AI-driven software design, development, automated crash triage, and automated regression verification into standard build pipelines across millions of active enterprise endpoints.
•Drive Technical Excellence: Set engineering standards, author key Architectural Decision Records (ADRs), mentor principal and senior talent, and represent our technical strategy with customers and engineering partners.
Qualifications
Minimum Qualifications
•Seasoned and accomplished leadership in Endpoint systems development, core networking, and/or OS-level software development.
•Cross-Product Impact: Track record of defining cross-team architecture that was successfully adopted across multiple product groups.
•Deep OS Internals: Expert hands-on knowledge in at least two target platforms:
•Windows: Kernel/driver models, WFP, services, OS process architecture.
•macOS: XPC, System/Network Extensions, IOKit, code-signing, notarization.
•Linux: Netlink, routing, network namespaces, DNS handling.
•Legacy Refactoring: Proven experience decomposing complex C/C++ codebases into modular, testable components using incremental, safe refactoring patterns.
•Technical Influence: Exceptional written and verbal communication skills; demonstrated ability to align senior engineers and executives behind complex architectural shifts.
Preferred Qualifications
•Hands-on experience with VPN, ZTNA, or SASE client technologies (IPsec/IKEv2, TLS/DTLS, QUIC/MASQUE, split tunneling, posture assessment).
•Experience shipping multi-platform agents at scale (millions of active endpoints) with staged rollouts and telemetry-backed observability.
•Background integrating AI/ML models into software engineering workflows.
Compensation
The compensation offered for this position will depend on qualifications, experience, and work location. For candidates who receive an offer at the posted level, the starting base salary is expected to be the annual range listed below. The offered compensation may also include restricted stock units and a bonus.
$248,700.00 - $341,250.00/yr
Immigration Sponsorship
Role is eligible for immigration sponsorship.
