Prepin
Log in
Commvault

engineering opportunity

Principal Network Engineer – Global Infrastructure & Cyber Resilience

The Principal Network Engineer will architect and manage the global network infrastructure, focusing on hands-on implementation of SD-WAN, multi-cloud connectivity, and Zero Trust frameworks. This role involves deep-dive troubleshooting, developing automation via Network-as-Code, and providing technical leadership to a global engineering team.

Tinton Falls, New Jersey, United StatesonsiteFULL_TIME

Posted

About the role

What will you do at Commvault?

Recruitment Fraud Alert

We’ve learned that scammers are impersonating Commvault team members—including

HR and leadership—via email or text. These bad actors may conduct fake

interviews and ask for personal information, such as your social security

number.

What to know:

* Commvault does not conduct interviews by email or text.

* We will never ask you to submit sensitive documents (including banking

information, SSN, etc) before your first day.

If you suspect a recruiting scam, please contact us at

[email protected] [[email protected]]

About Commvault

Commvault (NASDAQ: CVLT) is the gold standard in cyber resilience. The company

empowers customers to uncover, take action, and rapidly recover from

cyberattacks – keeping data safe and businesses resilient. The company’s unique

AI-powered platform combines best-in-class data protection, exceptional data

security, advanced data intelligence, and lightning-fast recovery across any

workload or cloud at the lowest TCO. For over 25 years, more than 100,000

organizations and a vast partner ecosystem have relied on Commvault to reduce

risks, improve governance, and do more with data.

The Opportunity..

As a Principal Network Engineer at Commvault, you will not just sit in an ivory

tower drawing diagrams'. We are looking for a Player-Coach—a technical

heavyweight who possesses the vision to architect a global network and the grit

to build and troubleshoot it personally.

This role is defined by Deep Execution. You will own the full lifecycle of our

global connectivity fabric, from the initial whiteboarding of a Zero Trust

framework to the hands-on configuration of the solution and the resolution of

complex multi-cloud routing issues. If you are a high-level architect who has

moved away from the CLI, this is not the role for you; we need a leader who

stays "close to the packets" while guiding our long-term technical strategy.

What You'll Do...

1. Hands-On Technical Leadership & Execution

* Build & Deploy: Take primary responsibility for the "First Build." You will

lead the hands-on implementation of global SD-WAN and Cloud nodes, ensuring

the transition from design to production is flawless.

* Deep-Dive Troubleshooting: Act as the ultimate technical escalation point.

When Tier-3 hits a wall, you dive into the logs, PCAPs, and routing tables

to identify and fix the root cause.

* Network-as-Code: Personally develop and maintain Terraform and

Ansible playbooks to automate the global environment, ensuring you are

driving the execution of automation, not just suggesting it.

1. Multi-Cloud & SD-WAN Sovereignty

* GCP & Azure Execution: Physically build and manage the transit gateways,

VPC/VNet peering, and Cloud Interconnects that power our multi-cloud

ecosystem.

* SD-WAN Mastery: Take the lead in configuring Prisma Access and NGFWs. You

will own the policy engine, hands-on, ensuring security is baked into every

route and interface.

* Zero Trust Integration: Move beyond the "Zero Trust" buzzword by executing

the actual micro-segmentation and identity-based access controls across our

hybrid footprint.

1. Security & Edge Engineering

* Zscaler and Firewall Expert: Act as the Subject Matter Expert (SME) for

Next-Generation Firewalls (NGFW), Zscaler Private Access (ZPA) and Zero Trust

Network Access (ZTNA). Own the global policy sets, SSL decryption strategies,

and threat prevention profiles.

* Hybrid Connectivity: Manage complex Site-to-Site VPNs, GRE tunnels, and

high-speed interconnects that link our global data centers with public cloud

regions.

1. Mentorship, Leadership & Executive Presence

* Strategic Influence: Partner with the CISO and Director of Infrastructure to

align networking goals with broader business initiatives.

* Technical Mentorship: Lead and upskill a global team of senior and mid-level

engineers. Conduct architectural reviews and set the "gold standard" for

documentation and code-based infrastructure.

* Vendor Management: Lead technical evaluations and QBRs with key partners

(Google, Microsoft, Palo Alto), ensuring Commvault is leveraging the latest

features and optimal pricing.

* Lead by Example: Set the technical standard for the engineering team

by demonstrating best practices in configuration, documentation, and

operational discipline.

* Executive Communication: Translate complex technical "war stories" and

execution hurdles into concise executive summaries for leadership, providing

clear paths for risk mitigation.

1. Automation & Excellence

* Infrastructure as Code (IaC): Champion a "Network-as-Code" mindset using

Terraform, Ansible, or Python to automate repetitive tasks and ensure 100%

configuration consistency.

* Operational Resilience: Own Tier-4 escalations for complex network outages.

Lead Root Cause Analysis (RCA) sessions that translate technical failures

into actionable business improvements.

Who You Are...

* Experience: 12+ years in Network Engineering, with a career path that proves

you have never lost your "hands-on" edge.

* Location: Preferably in New Jersey to help own the hardware in

the corporate data center.

* "In-the-Trenches" Expertise: Proven ability to build, operate, and

troubleshoot complex environments across Palo Alto (PCNSE level), GCP, and

Azure.

* SD-WAN & Zero Trust: Direct experience deploying Zscaler SD-WAN and

implementing ZTNA frameworks in a global enterprise.

* The "Principal" Skillset:

* Expert-level mastery of BGP, EVPN/VXLAN, and stateful firewalling.

* High proficiency in Python or Terraform for infrastructure deployment.

* The ability to command a room of executives while being the most technical

person on a bridge call.

* Communication: Exceptional written and verbal skills. You can explain the

"why" behind a $2M infrastructure investment to a Board of Directors just as

easily as you can debug a packet drop with an engineer.

Preferred Certifications:

* Zscaler: ZTDA or ZTDE

* Cloud: Google Professional Cloud Network Engineer or Azure Network Engineer

Associate (AZ-700).

* General: CCIE (Route/Switch or Security) is highly valued but not required if

equivalent experience is demonstrated.

You’ll love working here because...

* Continuous professional development, product training, and career pathing

* An inclusive company culture, opportunity to join our Employee Groups

* Generous benefits supporting your health, financial security, and work-life

balance

* Employee stock purchase plan (ESPP)

Ready to #makeyourmark at Commvault? Apply now!

#LI-JS1

#LI-Remote

Thank you for your interest in Commvault. Reflected below is the minimum and

maximum base salary range for this role. At Commvault we use broad salary ranges

in our job postings to reflect the diverse levels of expertise and experience

among our candidates and is not reflective of the total compensation and

benefits package. The specific salary offered will be determined based on your

unique qualifications, including your relevant experience, skills, and the value

you bring to the role. While the range provides a general idea of the

compensation, it is important to note that placements within the range are not

automatic and will be carefully considered to ensure a fair and competitive

offer. We are committed to rewarding talent and experience.

Pay Range

$93,500—$182,850 USD

Commvault is an equal opportunity workplace and is an affirmative action

employer. We are always committed to equal employment opportunity regardless of

race, color, ancestry, religion, sex, national origin, sexual orientation, age,

citizenship, marital status, disability, gender identity or Veteran status and

we will not discriminate against on the basis of such characteristics or any

other status protected by the laws or regulations in the locations where we

work.

Commvault’s goal is to make interviewing inclusive and accessible to all

candidates and employees. If you have a disability or special need that requires

accommodation to participate in the interview process or apply for a position at

Commvault, please email [email protected]

[[email protected]] For any inquiries not related to an accommodation

please reach out to [email protected]

[[email protected]].

Commvault's Privacy Policy [https://www.commvault.com/privacy-policy]

Which skills does this role require?

Network engineeringSD-WANZero TrustPalo AltoGCPBGPEVPN/VXLANPythonTerraformAnsibleNetwork-as-CodeCyber resilienceInfrastructure automationTroubleshootingCloud architectureNetwork EngineeringCyber ResilienceEVPNVXLANPCNSEPCCSECloud InterconnectNGFWPrisma AccessZTNAInfrastructure as CodeMulti-cloudVPCVNetSite-to-Site VPNGRE TunnelsRoot Cause AnalysisGlobal Infrastructure

Make your next move

Build a shortlist and prepare

Identify the requirements you can demonstrate, then choose examples from your work to discuss with the hiring team.

Review the responsibilities and requirements before adding an opening to your shortlist.

Role information can change. Confirm current details on the original application page.

Product

AI Candidate AgentCompaniesBrowse JobsDeep ProfileSkill AssessmentOpportunity Matching
Prepin.ai

© 2026 Prepin | All rights reserved.