Network Security Engineer (SASE/ZTNA)

TekSynap; United States; On-site; USD 120,000 - 170,000; Full time

Job summary

TekSynap is seeking a Network Security Engineer in the United States to modernize secure access infrastructure with cloud-native architecture, focusing on SASE, ZTNA and cloud security. You will deploy and manage SASE/SSE technologies, support zero-trust migrations, and automate security workflows using Python, PowerShell and Bash.

Ideal candidates have 2+ years in SASE/ZTNA with 5+ years in network engineering, plus hands-on experience with Netskope, Zscaler and Prisma Access, and familiarity

Qualifications

• 2+ years hands on with SASE, ZTNA, cloud platforms.
• 5+ years Network Engineering / VPN Engineering.
• Strong understanding of SD WAN, SSE/SASE architecture, Windows 10/11 networking.
• Hands on with Netskope, Zscaler, Palo Alto Prisma Access.
• Automation and scripting in Python, PowerShell, Bash.
• Familiarity with SNMP, SIEM, Grafana, Docker troubleshooting.

Responsibilities

• Deploy and manage SASE/SSE technologies: SWG, CASB, FWaaS, SD WAN, ZTNA.
• Support migration to Zero Trust and identity centric access models.
• Automate security workflows using Python, PowerShell, Bash.
• Develop and maintain API integrations for cloud native platforms, including Netskope.
• Troubleshoot complex issues involving routing, proxies, PAC files, SSL inspection, VLANs, NAT, DNS, 802.1X, SaaS/COTS apps.
• Perform protocol analysis using Wireshark and tcpdump.
• Monitor and maintain infrastructure using SNMP, SIEM, Grafana, syslog.
• Maintain cloud firewall policies across AWS, Azure, GCP.
• Support SD WAN and SASE integration for secure traffic steering.

Skills

SASE

ZTNA

Cloud platforms

SD-WAN

VPN Engineering

Windows networking

Netskope

Zscaler

Palo Alto Prisma Access

Python

PowerShell

Bash

API integrations

Wireshark

tcpdump

SNMP

SIEM

Grafana

Docker troubleshooting

PAC files

Routing protocols

Proxies

802.1X

AnyConnect

Firewalls

Job description

TekSynap is a fast-growing high-tech company that understands the pace of technology and the need for a well-planned information management environment. They are seeking a Network Security Engineer with strong experience in SASE, ZTNA, and cloud security to support the modernization of their secure access infrastructure using cloud native architecture.

Responsibilities

• Deploy and manage SASE/SSE technologies: SWG, CASB, FWaaS, SD WAN, ZTNA
• Support migration to Zero Trust and identity centric access models
• Automate security workflows using Python, PowerShell, Bash
• Develop and maintain API integrations for cloud native platforms, including Netskope
• Troubleshoot complex issues involving routing, proxies, PAC files, SSL inspection, VLANs, NAT, DNS, 802.1X, SaaS/COTS apps
• Perform protocol analysis using Wireshark and tcpdump
• Monitor and maintain infrastructure using SNMP, SIEM, Grafana, syslog
• Maintain cloud firewall policies across AWS, Azure, GCP
• Support SD WAN and SASE integration for secure traffic steering

Requirements

• Active Public Trust or ability to obtain
• 2+ years hands on with SASE, ZTNA, cloud platforms
• 5+ years Network Engineering / VPN Engineering
• Strong understanding of SD WAN, SSE/SASE architecture, Windows 10/11 networking
• Hands on with Netskope, Zscaler, Palo Alto Prisma Access
• Expertise in routing protocols, proxy architecture, PAC files
• Experience with AnyConnect, firewalls, 802.1X
• Automation and scripting in Python, PowerShell, Bash
• Familiarity with SNMP, SIEM, Grafana, Docker troubleshooting

Certifications

• Netskope Cloud Security Specialist (NCSS) and/or Zscaler Certified Administrator (ZCSA -- ZIA or ZPA track)
• CCNP Security
• Experience with DevOps, CI/CD, hybrid cloud security (AWS/Azure/GCP)