SENIOR NETWORK SECURITY ENGINEER

Accountabilities: As a Senior Network Security Engineer, you will provide technical leadership in network security engineering, ensuring secure connectivity, operational reliability, and continuous infrastructure improvement. Your responsibilities will include: Collaborate across technology teams to research, design, troubleshoot, and support enterprise network environments across on-premises and cloud infrastructure. Lead network security platform optimization initiatives and develop long-term solutions to recurring technical challenges. Perform regular backup and restoration testing and validation on weekly, monthly, and quarterly schedules. Provide Tier 3 technical support for incidents involving technologies managed by the Network Services team. Serve as the subject matter expert for the Zscaler Zero Trust Exchange suite, including ZIA, ZPA, Zscaler Client Connector (ZCC), and ZDX. Manage Zscaler tenant configurations, security policies, and platform lifecycle activities. Deploy, validate, and maintain ZPA App Connectors across AWS, on-premises, and branch environments to enable least-privilege, application-specific access. Design and optimize granular security policies covering application segmentation, URL filtering, SSL/TLS inspection, cloud firewall, sandboxing, and Data Loss Prevention (DLP). Configure and maintain forwarding profiles, SSL inspection, and secure web gateway controls while balancing security requirements with user experience. Lead a proof of concept evaluating Zscaler Zero Trust Exchange for private application access in AWS and contribute to the long-term network connectivity modernization roadmap. Monitor platform health, security events, and digital experience through ZDX. Troubleshoot connectivity, authentication, and policy enforcement issues using system logs, packet captures, and HAR files. Integrate Zscaler solutions with identity providers such as Microsoft Entra ID using SAML and OIDC to support Single Sign-On (SSO), Multi-Factor Authentication (MFA), and conditional access. Support Zscaler Client Connector deployments through endpoint management platforms such as Microsoft Intune. Participate in incident, problem, and change management processes, including Change Advisory Board (CAB)-controlled activities. Develop and maintain technical documentation, operational runbooks, standard operating procedures, and network architecture diagrams. Requirements The ideal candidate combines strong network security engineering expertise with hands-on experience in Zero Trust technologies, cloud networking, and enterprise infrastructure. You should bring: 5+ years of experience in network security, cybersecurity engineering, or network engineering with a strong focus on security. Hands-on experience administering Zscaler ZIA and ZPA at scale, including security policy configuration, Client Connector deployment, and App Connector hosting. Practical understanding of Zero Trust Network Access (ZTNA) principles and least-privilege, application-specific access models. Working knowledge of AWS networking components, including VPCs, route tables, security groups, Transit Gateway, and PrivateLink. Strong familiarity with identity management and authentication technologies, including SAML 2.0, OIDC, Microsoft Entra ID, MFA, and conditional access. Solid understanding of core networking concepts such as TCP/IP, DNS, DHCP, routing, and SSL/TLS certificates. Ability to analyze logs, packet captures, and HAR files to identify, troubleshoot, and resolve complex technical issues. Strong knowledge of network security protocols and technologies, including IPsec, SSL/TLS, IDS/IPS, Web Application Firewalls (WAF), and DDoS protection. Experience designing and supporting cloud and hybrid cloud network environments, particularly within AWS. Bachelor's degree in Computer Science or an equivalent combination of education and professional experience. Excellent written and verbal communication skills. Strong analytical thinking, troubleshooting, and problem-solving abilities. Positive, proactive, and solutions-oriented approach to technical challenges. Ability to explain complex technical concepts clearly to both technical and non-technical stakeholders. Nice to have: Experience with AWS WAF and AWS Firewall Manager. Familiarity with Aviatrix networking solutions. Scripting and automation experience using PowerShell, Python, or Terraform, including Zscaler Terraform providers. AWS Cloud Practitioner or equivalent cloud certification. Zscaler certifications such as ZIA Certified Administrator, ZPA Professional, Zscaler Digital Transformation Administrator (ZDTA), or Zscaler Digital Experience Administrator (ZDXA). AWS Advanced Networking Specialty certification. Security certifications such as CompTIA Security+ or SANS/GIAC. ITIL v3 Foundation certification. Benefits Annual salary ranging from $120,000 to $140,000. Medical, dental, and vision insurance. Life and accidental death insurance. Short-term and long-term disability insurance. Retirement savings plan. Paid time off and holiday leave, depending on location. Paid parental leave and personal leave options. Flexible Spending Accounts (FSAs). Employee Assistance Program. Health and wellness programs. Associate shopping program and discount marketplace. Identity theft protection. Pet insurance. Commuter benefits. Opportunities to work in a collaborative technology environment with access to professional development and career growth.