Lead Engineer, Network Security Platform

KPMG LLP; Montvale (NJ); On-site; USD 140,000 - 190,000; Full time

Job summary

KPMG LLP in the United States is seeking a Lead Engineer for our Network Security Platform to join the Digital Nexus technology team. You will help shape security architecture roadmaps and ensure integration of Zscaler, GCP, and Palo Alto within the wider tech stack.

Ideal candidates bring deep hands-on experience with cloud security, network automation, and IaC tools, and can mentor the network team while delivering high-quality, on-time results in a fast-paced environment.

Qualifications

• Experience with Web proxy products and cloud security platforms.
• Hands-on with GCP networking and security services.
• Familiarity with network automation tools.
• Ability to lead and mentor teams.

Responsibilities

• Assist in the development of technology architecture product roadmaps and maintain roadmaps; evaluate the current network security architecture and develop action plans to improve in line with industry standards; ensure Zscaler, GCP, and Palo Alto integrate with infrastructure.
• Maintain deep technical and business knowledge of industry directions; deliver roadmap products on schedule and with high quality.
• Provide guidance and direction; ensure product development adherence, performance and budgets; provide last-tier support and root-cause analysis; define and enforce system standards.
• Offer last-tier support for operations and support teams, provide training and guidance to Network team.
• Act with integrity, professionalism, and uphold KPMG's respectful environment.

Skills

Zscaler

Palo Alto Prisma/Firewalls

GCP cloud engineering

Infrastructure as Code Terraform/Ansys

Network security architecture

Leadership and mentoring

Education

Bachelor's degree preferred

High school diploma or GED required

Tools

Terraform

Ansible

Zscaler

Palo Alto Panorama

VM-Series

Job description

KPMG is currently seeking a Lead Engineer, Network Security Platform to join our Digital Nexus technology team.

Responsibilities:

• Assist in the development of technology architecture product roadmaps andmaintainexisting roadmaps; evaluate the current network security architecture and develop action plans to make necessary improvements in line with industry best practices and standards, as well as provide inputon the overall technology plan for the organization, ensuring specific technologies (Zscaler, GCP, Palo Alto) integrate effectively with other aspects of the technical infrastructure and ecosystem
• Maintain deep technical and business knowledge of current industry directions and trends; work to deliver technology and products in the roadmap on schedule and with the highest quality
• Provide advice, guidance, and direction to carry out plans and procedures; ensure product development process adherence, performance and budget targets are met; offer last tier support for operations and support teams, including root cause analysis and preventative analysis; establish network environments by designing system configuration, and direct system installation by defining, documenting, and enforcing system standards
• Offer last-tier support for operations and support teams, including root cause analysis and preventative analysis; provide training and guidance to other members of the Network team
• Act with integrity, professionalism, and personal responsibility to uphold KPMG's respectful and courteous work environment

Qualifications:

• Minimum five years of recent experience with Web proxy products like ZScaler, Palo Alto Prisma and other competitive vendor products, cloud Environments like Azure, GCP; deep level of expertise with Palo Alto firewalls including physical (Strata) and virtual (VM-Series) form factors, Panorama management, and Prisma Access/SaaS security
• Bachelor's degree from an accredited college or university is preferred; minimum of a high school diploma or GED is required
• Hands-on experience in Google Cloud Platform (GCP) engineering, specifically focused on VPC design, Cloud Armor, and integrating security appliances within a cloud-native environment and proven experience in Zscaler platform engineering, including the design, implementation, and management of Zscaler Internet Access (ZIA) and Zscaler Private Access (ZPA) solutions
• Strong background in network automation and "Infrastructure as Code" (such as Terraform, Ansible) to streamline firewall and proxy deployments
• Excellent verbal/written communication, with ability to effectively interact with individuals at all levels of responsibility and authority; ability to prioritize, delegate and foster the development of high-performance teams to lead/support an environment driven by customer service and teamwork; strong trouble-shooting and organizational skills and ability to work on multiple projects simultaneously; ability to participate in resource planning processes based on defined organizational plans
• Applicants must be authorized to work in the U.S. without the need for employment-based visa sponsorship now or in the future; KPMG LLP will not sponsor applicants for U.S. work visa status for this opportunity (no sponsorship is available for H-1B, L-1, TN, O-1, E-3, H-1B1, F-1, J-1, OPT, CPT or any other employment-based visa)