Procore Technologies is the leading technology partner for every stage of construction. We empower construction teams to drive efficiency and mitigate risk through actionable AI & data-driven insights. For over 20 years, we have been transforming the industry with purpose-built solutions for construction professionals and we’re looking for talented people to help us build together.
We are looking for a Staff Network Engineer to serve as the technical lead for Procore's corporate network across on-premises and cloud environments. As the Staff Network Engineer on our IT Infrastructure team , you will work closely with Security, Cloud/Platform Engineering, IT leadership, and external partners to establish reference architectures, advance our Zero Trust/SASE strategy, and build scalable network automation. Your strengths in enterprise network architecture, Zero Trust/SASE platforms (Zscaler ZIA/ZPA), and cloud networking infrastructure will drive your success.
You will report to the Manager of Network Engineering and will be based in our Carpinteria, CA office.
What You’ll Do
Own the long-term technical direction, multi-year roadmap, and reference architecture for Procore's global network footprint across corporate offices, data centers, and multi-cloud IaaS environments.
Lead the architectural evolution and operational maturity of our enterprise SASE/SSE platform (Zscaler ZIA and ZPA), transitioning legacy perimeter access to a secure, least-privilege Zero Trust Network Access (ZTNA) model.
Partner with Identity, InfoSec, and Platform teams to integrate network access controls with identity providers (SAML/SCIM), device posture validation, and SIEM logging pipelines.
Drive network automation and infrastructure-as-code initiatives, engineering scalable tooling that reduces operational toil and enforces consistent configuration standards across global environments.
Serve as the principal escalation authority for critical network incidents, directing root-cause investigations and implementing durable architectural remediations.
Mentor and elevate network engineering team members through technical design reviews, knowledge sharing, and establishing best-in-class operational standards.
Conduct vendor evaluations and technology assessments to deliver well-reasoned build-versus-buy recommendations aligned with enterprise compliance, capacity, and performance requirements.
What You Bring
Extensive enterprise network engineering experience designing, deploying, and operating highly available routing (BGP, OSPF), switching, SD-WAN, and hybrid cloud network topologies.
Proven hands-on production expertise architecting and administering SASE/ZTNA platforms at enterprise scale, with deep knowledge of Zscaler ZIA and ZPA (or comparable platforms such as Palo Alto Prisma Access, Netskope, or Cloudflare One).
Strong technical background in multi-cloud networking (AWS and/or Azure/GCP), including transit gateway design, VPC/VNet peering, direct interconnects, and hybrid cloud connectivity.
Demonstrated capability with network automation and infrastructure-as-code tooling (e.g., Python, Ansible, Terraform) to manage distributed network state programmatically.
In-depth understanding of enterprise security engineering, including next-generation firewalls, TLS/SSL inspection, PKI/cryptography in transit, microsegmentation, and zero-trust policies.
Strong cross-functional leadership and communication skills, with a track record of driving consensus on complex technical architectures across IT, Engineering, and Security teams.
Bachelor's degree in Computer Science, Management Information Systems, or a related technical field, or equivalent practical work experience; advanced industry certifications (e.g., CCIE/CCNP, ZDTA/ZDTE, or Cloud Network Specialties) are a plus.
Strong-fit Background Might Include
Enterprise Network Architect or Principal Network Engineer specializing in global SASE/Zero Trust migrations
Cloud Network Infrastructure Engineer…