Network Security Engineer

World Wide Technology, Inc.; Australia; On-site; AUD 120,000 - 180,000; Full time

Job summary

World Wide Technology, Inc. is seeking a Network Security Engineer to lead the Blue Coat to Zscaler migration, combining hands-on Palo Alto firewall engineering with migration delivery and change management.

You will work across security teams to analyze policies, configure firewalls, and ensure smooth cutovers. Ideal candidates have 5+ years in network security, strong PAN-OS experience, and ITIL-aligned change management with ServiceNow.

Qualifications

• 5+ years in network security engineering required.
• Strong hands-on experience with Palo Alto firewalls (PAN-OS, Panorama).
• Experience with ITIL-aligned change management and ServiceNow.

Responsibilities

• Plan and execute Blue Coat to Zscaler migration, including policy analysis and phased cutovers.
• Review Blue Coat policies and rebuild in ZIA.
• Configure and maintain Palo Alto firewalls to support traffic to Zscaler (GRE/IPsec, PAC files).
• Troubleshoot connectivity, SSL inspection, authentication, and performance issues across Palo Alto, Zscaler, and legacy proxy.
• Raise, plan, and implement changes through ServiceNow with risk assessments and CAB participation.
• Manage incidents, problems, and requests in ServiceNow and keep records accurate.
• Produce runbooks, migration documentation, and as-built diagrams.
• Coordinate with application, network, endpoint, and identity teams; provide status updates to leadership.

Skills

Network security engineering

Palo Alto firewalls

ITIL change management

Troubleshooting skills

TCP/IP & routing

Communication skills

Tools

Palo Alto PAN-OS

Panorama

Zscaler ZIA/ZPA

ServiceNow

Wireshark/tcpdump

Splunk

Job description

Role: Network Security Engineer with Palo Alto / Blue Coat to Zscaler Migration

Position Summary

We are seeking a Network Security Engineer to support and execute a migration from Symantec Blue Coat ProxySG to Zscaler Internet Access (ZIA). The role combines hands-on Palo Alto firewall engineering with migration delivery, change management, and troubleshooting across a complex security environment.

Key Responsibilities

• Plan and execute the Blue Coat to Zscaler migration, including policy analysis, translation, and phased user and site cutovers
• Review existing Blue Coat policies (URL categories, SSL interception, authentication, bypass rules) and rebuild them in ZIA
• Configure and maintain Palo Alto firewalls (policy, NAT, routing, GlobalProtect, Panorama) to support traffic steering to Zscaler (GRE/IPsec tunnels, PAC files, Zscaler Client Connector)
• Troubleshoot connectivity, SSL inspection, authentication, and performance issues across Palo Alto, Zscaler, and the legacy proxy
• Raise, plan, and implement changes through ServiceNow, including risk assessments, implementation and backout plans, and CAB participation
• Manage incidents, problems, and requests in ServiceNow and keep records accurate
• Produce runbooks, migration documentation, and as-built diagrams
• Coordinate with application owners, network, endpoint, and identity teams, and provide status updates to project leadership

Required Qualifications

• 5+ years in network security engineering
• Strong hands-on experience with Palo Alto Networks firewalls (PAN-OS, Panorama)
• Proven change management experience in an ITIL-aligned environment, including authoring and implementing changes in ServiceNow
• Strong troubleshooting skills: packet captures, log analysis, traffic flow tracing, and root cause analysis
• Solid understanding of TCP/IP, routing, DNS, proxy concepts, PKI, and SSL/TLS inspection
• Strong written and verbal communication skills

Preferred Qualifications

• Experience with Zscaler ZIA/ZPA, or with proxy migrations (Blue Coat, Forcepoint, McAfee Web Gateway)
• Familiarity with SASE/SSE architecture and zero trust principles
• Experience with SAML/SSO and Azure AD/Entra ID integration
• Scripting or automation experience (Python, APIs, Terraform)
• Certifications: PCNSE, Zscaler ZCCA/ZDTA, ITIL Foundation

Tools and Technologies

Palo Alto (PAN-OS, Panorama, GlobalProtect), Zscaler (ZIA, Client Connector), Blue Coat ProxySG, ServiceNow (Change, Incident, Problem), Wireshark/tcpdump, Splunk or similar SIEM