Note: The job is a remote job and is open to candidates in USA. Reach Security helps organizations understand and validate what their existing security tools should be doing. The Principal Support Engineer, Network serves as the senior network subject-matter expert, advising the field and customers, troubleshooting integrations, resolving complex issues, and improving the product through escalations, documentation, and enablement.
Responsibilities
- Serve as the network subject-matter expert for the support team — review customer firewall rule-bases, network policies, segmentation, and controls, and make sage, prioritized recommendations grounded in real-world best practice (overly permissive, shadowed, redundant, or risky rules; exposure; segmentation gaps)
- Critique Reach's network findings so customers are presented only with what truly matters — separating signal from noise and articulating why a finding is urgent, or why it isn't
- Troubleshoot integrations between Reach and third-party network-security products (NGFW, IDS/IPS/NDR, proxy/SWG, SASE/ZTNA, and similar) — using your deep knowledge of how those platforms actually behave to pinpoint where an integration breaks and propose the fix. This is where your hands-on background is exercised most directly
- Diagnose deep, engineering-level customer issues end to end — reasoning from packet captures, flow data, device logs, and protocol behavior to reach true root cause, then packaging a clear diagnosis and proposed fix that Engineering can act on quickly
- Uplevel the Sales Engineering team — teach the technical field team to read and explain network findings, defend recommendations to customer network and security teams, and translate product output into what actually matters to the customer
- Partner with Engineering and QA to report defects, validate fixes, confirm workarounds, and drive root-cause analysis
- Author and maintain runbooks, audit playbooks, and internal documentation that turn your field experience into repeatable team knowledge
- Maintain enough of a lab or test capability across representative network platforms to validate hypotheses about behavior and integration edge cases
Skills
- 6+ years of deep, hands-on experience with enterprise network security — firewalls, segmentation, and network traffic analysis — enough to have developed genuine expertise, not passing familiarity
- Time in a senior individual-contributor role such as L3 Network Support Engineer, Network Security Engineer, Firewall Engineer, or Security Support Engineer
- Platform-level expertise with one or more enterprise firewall ecosystems — Palo Alto (PAN-OS), Fortinet FortiGate, Cisco (ASA/Firepower), Check Point, or Juniper — including rule-base design, review, and optimization, and the judgment to know what “good” looks like
- Strong command of TCP/IP and network protocol internals, with the ability to reason from packet captures (Wireshark/tcpdump), flow/telemetry data, and device logs to root cause
- Depth in network segmentation and micro-segmentation, NAT, routing (BGP/OSPF), VPN (IPsec/SSL), and TLS/SSL inspection
- Experience with IDS/IPS/NDR, secure web gateways/proxies, DNS security, and modern SASE/ZTNA architectures
- Cloud network security experience — AWS security groups/NACLs, Azure NSGs, GCP firewall rules, VPCs, and connectivity/peering constructs
- A track record resolving interoperability issues between network-security tools and the broader stack
- Working knowledge of Linux system administration, sufficient to reason about the services that collect from and integrate with network devices
- Experience with enterprise-scale, multi-site environments and large, heterogeneous network estates
- The advisory instinct that defines this role: the ability to look at a rule-base or a set of findings and tell a customer, clearly, which few things matter and why
- Strong written and verbal communication — you can make a complex network issue clear to a customer, an SE, and an engineer, each in their own language
- Strong time management and a real sense of urgency in customer-impacting situations
- BS or MS in Computer Science, Engineering, Networking, or a related technical discipline — or equivalent practical experience
- Relevant certifications (e.g., PCNSE, NSE, CCNP/CCIE Security, CISSP) — valued as evidence of depth, not required
- Experience with WAF, load balancers, and application-layer security
- Familiarity with network detection/analytics, SIEM, or SOAR platforms from a support or troubleshooting perspective
- Scripting/automation for network validation and troubleshooting (Python, or platform APIs)
- Exposure to hybrid and multi-cloud connectivity (transit gateways, SD-WAN, cloud firewalls)
Benefits
- Equity package
- Medical, dental, and vision insurance, including plan options with company-paid employee coverage
- FSA, HSA, and 401(k) plans
- Company-paid life insurance and disability coverage, along with buy-up options
- Voluntary benefits including pet insurance, identity theft coverage, and legal services
- Unlimited PTO and sick time
Company Overview