SENIOR NETWORK SECURITY ENGINEER

The Senior Network Security Engineer will lead the design, deployment, and maintenance of secure network access solutions across cloud and on-premises environments. This role focuses on advancing Zero Trust architecture and strengthening enterprise security through modern technologies and industry best practices. You will take ownership of the Zscaler security ecosystem, including ZIA, ZPA, and ZTNA, while supporting secure connectivity across AWS infrastructure. Working closely with cybersecurity, cloud, and enterprise technology teams, you will drive infrastructure modernization and improve application access security. You will also lead technical initiatives, optimize network performance, and resolve complex security challenges. This is an opportunity to shape large-scale network security architecture while contributing to a resilient, innovative, and continuously evolving technology environment.

The ideal candidate combines strong network security engineering expertise with hands-on experience in Zero Trust technologies, cloud networking, and enterprise infrastructure. You should bring:

• 5+ years of experience in network security, cybersecurity engineering, or network engineering with a strong focus on security.

• Hands-on experience administering Zscaler ZIA and ZPA at scale, including security policy configuration, Client Connector deployment, and App Connector hosting.

• Practical understanding of Zero Trust Network Access (ZTNA) principles and least-privilege, application-specific access models.

• Working knowledge of AWS networking components, including VPCs, route tables, security groups, Transit Gateway, and PrivateLink.

• Strong familiarity with identity management and authentication technologies, including SAML 2.0, OIDC, Microsoft Entra ID, MFA, and conditional access.

• Solid understanding of core networking concepts such as TCP/IP, DNS, DHCP, routing, and SSL/TLS certificates.

• Ability to analyze logs, packet captures, and HAR files to identify, troubleshoot, and resolve complex technical issues.

• Strong knowledge of network security protocols and technologies, including IPsec, SSL/TLS, IDS/IPS, Web Application Firewalls (WAF), and DDoS protection.

• Experience designing and supporting cloud and hybrid cloud network environments, particularly within AWS.

• Bachelor's degree in Computer Science or an equivalent combination of education and professional experience.

• Excellent written and verbal communication skills.

• Strong analytical thinking, troubleshooting, and problem-solving abilities.

• Positive, proactive, and solutions-oriented approach to technical challenges.

• Ability to explain complex technical concepts clearly to both technical and non-technical stakeholders.

Nice to have:

• Experience with AWS WAF and AWS Firewall Manager.

• Familiarity with Aviatrix networking solutions.

• Scripting and automation experience using PowerShell, Python, or Terraform, including Zscaler Terraform providers.

• AWS Cloud Practitioner or equivalent cloud certification.

• Zscaler certifications such as ZIA Certified Administrator, ZPA Professional, Zscaler Digital Transformation Administrator (ZDTA), or Zscaler Digital Experience Administrator (ZDXA).

• AWS Advanced Networking Specialty certification.

• Security certifications such as CompTIA Security+ or SANS/GIAC.

• ITIL v3 Foundation certification.