Job description

Title: Network Engineer Reports To: Sr. Manager - Network Engineering Location: Pittsburgh, PA American Eagle is a youth culture brand grounded in denim. Our purpose extends beyond making the best jeans–we embrace self expression, culture, optimism and connection. Through the brand platform Live Your Life, we empower our community to be who they want to be all while wearing the clothes that make them most confident. Get to Know the Role: We are seeking a Network Engineer to design, scale, and secure our enterprise network infrastructure across cloud environments, data enters, and remote locations. In this role, you will leverage deep expertise in Palo Alto Networks, GCP cloud networking, and Prisma Access SASE solutions to build resilient, Zero Trust architectures that protect global operations. As a key technical authority, you will drive major infrastructure modernizations, solve complex enterprise-scale connectivity challenges, and ensure maximum reliability across our global footprint. What You’ll Do: • Design, implement, and operate secure, reliable, and scalable network services across locations, data centers, cloud environments, partner connectivity, and remote-user access. • Design, implement, and support Google Cloud Platform or similar Cloud network-security solutions, including VPC architecture, • Cloud NGFW, Palo Alto VM-Series firewalls, routing, segmentation, ingress and egress controls, NAT, and centralized logging. • Design, deploy, configure, and support next-generation firewalls across data centers, retail locations, internet edge, B2B partner connectivity, remote access, and cloud environments. • Design, implement, and support GlobalProtect VPN and Prisma Access services for secure remote-user connectivity. • Lead hardware refreshes, software upgrades, migrations, and platform consolidations with minimal business impact. • Lead lifecycle management, upgrades, capacity planning, resiliency testing, and operational improvements for remote-access and SASE platforms. • Troubleshoot complex firewall, connectivity, routing, NAT, application, and performance issues using logs, packet captures, traffic-flow analysis, and monitoring tools. • Troubleshoot remote-user connectivity, application performance, authentication, voice and video quality, routing, and security-policy issues across GlobalProtect and Prisma Access. • Serve as an escalation resource for major network incidents, participate in the on-call rotation, support front-line operations teams with complex issues, lead root-cause analysis, and implement corrective actions to prevent recurrence. What You Bring: Bachelor's Degree in Computer Science or a related field or an equivalent combination of education and experience. At least 3 years of networking experience that includes: • Experience in large-scale, complex enterprise, or high-traffic global environments. • Strong understanding of networking concepts and protocols (e.g., TCP/IP, BGP, EIGRP, OSPF, VLANs, DNS/DHCP). • Hands-on experience with Palo Alto Networks firewalls, Panorama, GlobalProtect VPN, and Prisma Access. • Strong understanding of remote-access VPN, SASE, Zero Trust Network Access, IPsec VPN, identity integration, and security-policy implementation. • Strong experience with Google Cloud Platform or similar cloud networking and security, including VPCs, firewall policies, Cloud. • NGFW or third-party cloud firewalls, Cloud VPN, Cloud Interconnect, Cloud Router, BGP, Cloud DNS, and load balancing. • Experience troubleshooting GlobalProtect and Prisma Access issues using firewall logs, Prisma Access logs, packet captures, routing data, and end-user experience metrics. • Experience designing secure connectivity for remote users, retail locations, cloud environments, data centers, and third-party partners. • Exceptional network troubleshooting and problem isolation skills. • Knowledge of PCI Regulatory Compliance requirements is a plus. • Related industry standard certifications is a plus. Perks: Why You’ll Love it Here • Generous Associate Discount: Treat yourself to the best our brands offer! • Summer Fridays (For Pittsburgh, NYC and Remote Corporate Associates): More time for the sun and the weekend between • Memorial Day and Labor Day. • Casual Dress Code: Come as you are (and stay comfy). • Hybrid Schedule: Enjoy a blend of home-office focus and in-office collaboration. • In-Person Connection: While we love our digital tools, we love our people even more! To keep our culture thriving, in-person presence is required at one of our Pittsburgh or NYC headquarters, distribution centers or field locations for interviews, orientation and periodic quarterly meetups. • In-Office Events: Exciting company-wide events you won’t want to miss! Pay/Benefits Information: • Actual starting pay is determined by various factors, including but not limited to relevant experience and location. • Subject to eligibility requirements, associates may receive health care benefits (including medical, vision, and dental); wellness benefits; 401(k) retirement benefits; life and disability insurance; employee stock purchase program; paid time off; paid sick leave; and parental leave and benefits. • Paid Time Off, paid sick leave, and holiday pay vary by job level and type, job location, employment classification (part-time or full-time / exempt or non-exempt), and years of service. For additional information, please click here . • AEO may also provide discretionary bonuses and other incentives at its discretion. #LI-CH1

Requirements

Must-haves

Title: Network Engineer
Reports To: Sr. Manager - Network Engineering
Location: Pittsburgh, PA
Design, implement, and operate secure, reliable, and scalable network services across locations, data centers, cloud environments, partner connectivity, and remote-user access.
Design, implement, and support Google Cloud Platform or similar Cloud network-security solutions, including VPC architecture,
Cloud NGFW, Palo Alto VM-Series firewalls, routing, segmentation, ingress and egress controls, NAT, and centralized logging.
Design, deploy, configure, and support next-generation firewalls across data centers, retail locations, internet edge, B2B partner connectivity, remote access, and cloud environments.
Design, implement, and support GlobalProtect VPN and Prisma Access services for secure remote-user connectivity.
Lead hardware refreshes, software upgrades, migrations, and platform consolidations with minimal business impact.
Lead lifecycle management, upgrades, capacity planning, resiliency testing, and operational improvements for remote-access and SASE platforms.
Troubleshoot complex firewall, connectivity, routing, NAT, application, and performance issues using logs, packet captures, traffic-flow analysis, and monitoring tools.
Troubleshoot remote-user connectivity, application performance, authentication, voice and video quality, routing, and security-policy issues across GlobalProtect and Prisma Access.
Bachelor's Degree in Computer Science or a related field or an equivalent combination of education and experience. At least 3 years of networking experience that includes:
Experience in large-scale, complex enterprise, or high-traffic global environments.
Strong understanding of networking concepts and protocols (e.g., TCP/IP, BGP, EIGRP, OSPF, VLANs, DNS/DHCP).
Hands-on experience with Palo Alto Networks firewalls, Panorama, GlobalProtect VPN, and Prisma Access.
Strong understanding of remote-access VPN, SASE, Zero Trust Network Access, IPsec VPN, identity integration, and security-policy implementation.
Strong experience with Google Cloud Platform or similar cloud networking and security, including VPCs, firewall policies, Cloud.
NGFW or third-party cloud firewalls, Cloud VPN, Cloud Interconnect, Cloud Router, BGP, Cloud DNS, and load balancing.
Experience troubleshooting GlobalProtect and Prisma Access issues using firewall logs, Prisma Access logs, packet captures, routing data, and end-user experience metrics.
Experience designing secure connectivity for remote users, retail locations, cloud environments, data centers, and third-party partners.
Exceptional network troubleshooting and problem isolation skills.

Nice-to-haves

Knowledge of PCI Regulatory Compliance requirements is a plus.
Related industry standard certifications is a plus.

Application prep

Use the role’s language and application details while tailoring your materials.

Keywords to mirror

gcp

Platform: oracle-cloud
Effort: medium

Benefits

Benefits detected in the listing.

Dental

Vision

401(K)

Paid Time Off

Parental Leave

Wellness