Network Security Specialist Senior (SWG)

RiseMe; Cincinnati (OH); Hybrid; USD 120,000 - 180,000; Full time

Job summary

Global Payments seeks a Network Security Engineer Senior Specialist to lead the Secure Access and Zero Trust transformation, focusing on SWG, Proxy, SASE, and related security services across a global enterprise. The role emphasizes architecture, strategy, and hands-on engineering for scalable security controls.

The candidate will work with Zscaler (ZIA/ZPA) and Palo Alto technologies, driving adoption, automation, and post-incident improvements while mentoring teams and aligning with security

Qualifications

• Bachelor's degree or equivalent with 12+ years of security engineering experience.
• Deep hands-on expertise with Zscaler, SWG, SASE, and Zero Trust in large enterprises.
• Strong knowledge of Palo Alto platforms and cloud-delivered security services.

Responsibilities

• Lead Secure Access and Zero Trust transformation, providing technical leadership and strategy.
• Own architecture, engineering, and ongoing improvement of Zscaler, Palo Alto, and related security platforms.
• Design and implement scalable security controls for internet access and private app access.
• Drive operational excellence with automation, telemetry, SIEM integration, and metrics.
• Lead major initiatives including rollout planning, risk mitigation, and post-implementation reviews.
• Mentor engineers and collaborate across security, infrastructure, and operations teams.

Skills

Zscaler

SWG

SASE

Zero Trust

Palo Alto

Panorama

Threat Prevention

SSL Inspection

Traffic Steering

TLS

TCP/IP

Automation

Python

Terraform

APIs

Git

CI/CD

Education

Bachelor's degree in a related field

Tools

Terraform

Python

APIs

Git

CI/CD

Job description

Job Description

This position is not eligible for visa sponsorship, now or in the future. Candidates must be a US Citizen or Green Card Holder

This position is hybrid 3 days per week in either our Cincinnati, OH(preferred)or Atlanta, GA office

Are you ready to write your next chapter?

Make your mark at one of the biggest names in payments.We’relooking for aNetwork Security EngineerSeniorSpecialistto join ourever-evolvingEdge&NetworkSecurityteam and help us unleash the potential of every business.

This roleis responsible forstrengthening, modernizing, and evolving our secure access and network security platforms across a global enterprise environment, while leading the organization's Zero Trust transformation journey. This is a hands-on technical leadership role focused primarily on Secure Web Gateway (SWG), Proxy, SASE, Secure Access, and Zero Trust architectures, with responsibility for driving strategy, architecture, adoption, and continuous improvement across related network security capabilities, including IPS/IDS and firewall-adjacent controls.

Our core platforms include Zscaler (ZIA / ZPA) and Palo Alto Networks technologies, including Panorama, on-prem NGFW, cloud NGFW, Threat Prevention, and Prisma Access.

On-Call Expectations:

Participatein a rotating on-call schedule for incidents.Act as a senior escalation point formajor issuesaffecting secure access, proxy, SASE, or related network security services.Contribute to post-incident analysis and ensure durable corrective actions are implemented.Participate in readiness activities, operational reviews, and resilience improvements for critical control-plane services.

On-Call Schedule:

Weekdays:10am–10pm ET(rotates between4 colleagues)
Weekends:10pmFriday– 10pmSundayET( rotatesbetween7colleagues

Whatyou’llown:

• Lead the organization's Secure Access and Zero Trust transformation journey, providing technical leadership and strategic direction for SASE, SWG, Proxy, Secure Access, and related network security services.

• Own the architecture, engineering, and continuous improvement of Zscaler (ZIA/ZPA), Palo Alto (Panorama, NGFW, Threat Prevention, Prisma Access), and associated security platforms across a global enterprise environment.

• Design, implement, andoptimizescalable security controls and policies for internet access, private application access, SSL inspection, traffic steering, threat prevention, and Zero Trust access models.

• Drive operational excellence and platform reliability through standardization, tuning, automation, telemetry improvements, SIEM integration, and data-driven performance metrics.

• Lead high-quality change management and major initiatives, including rollout planning, validation, risk mitigation, rollback readiness, and post-implementation reviews.

• Serve as the senior technical authority and final escalation point for complex issues, high-risk changes, major incidents, and cross-functional initiativesimpactingcritical security services.

• Mentor engineers and partner with security, infrastructure, operations, application teams, and vendors toestablishbest practices, improve operational maturity, and deliver secure, resilient, and scalable services.

Whatyou’llbring

• Bachelor's degree in a related field and 12+ years of experience, or equivalent practical experience, with extensive experience in network security and security engineering within large-scale enterprise environments.

• Deep hands-onexpertisewith Zscaler technologies and Secure Access architectures, including ZIA, ZPA, SWG, Proxy, SASE, SSL Inspection, Traffic Steering, and Zero Trust deployments at enterprise scale.

• Strong experience with Palo Alto security platforms, including Panorama, NGFW, Threat Prevention, Prisma Access, and cloud-delivered security services.

• Expert-level knowledge of networking and security fundamentals, including TCP/IP, TLS, DNS, routing, NAT, certificates, identity-aware access, cloud networking, and Zero Trust principles.

• Demonstrated ability to lead large-scale security initiatives, influence architecture and technical direction,establishengineering standards, and drive operational maturity.

• Experience serving as a senior escalation point for major incidents and complex enterprise-wide issues, balancing security, resiliency, operational efficiency, and user experience in global environments.

• Proven leadership, mentoring, and stakeholder management skills, with the ability to collaborate effectively across security, infrastructure, cloud, application, operations, and executive teams.
  

It’sa bonus if you have

• Experience developing automation and Infrastructure-as-Code solutions using Terraform, Python, APIs, Git, and CI/CD pipelines to improve operational efficiency and platform consistency.

• Experience with WAF technologies (Akamai, Cloudflare, or F5 Distributed Cloud) and application security controls.

• Experience with cloud-native and hybrid security architectures across multi-cloud and enterprise environments.

• Relevant certifications such as Zscaler (ZCCA/ZCCP), PCNSE, CISSP, CCSP, GIAC, or equivalent advanced security certifications.

About the team

To learn more about our winning teams, check out ourworld-class teamsthatown itevery day.

What makes aWorldpayer

What makes aWorldpayer?It’ssimple: Think, Act, Win. We stay curious, always asking the rightquestionsandfinding creative solutions to simplify the complex.We’redynamic,everyWorldpayeris empowered to make the right decisions for their customers. Andwe’redetermined, always staying openandwinning and failing as one.

EEOC Statement

Global Payments is an equal opportunity employer. We evaluate qualified applicants without regard to race, color, religion, sex, sexual orientation, gender identity, marital status, genetic information, national origin, disability, veteran status, and other protected characteristics. The EEO is the Law poster is available here.

If you are made a conditional offer of employment and will be working in the United States, you will be required to undergo a drug test. In developing this job description care was taken to include all competencies and requirements needed to successfully perform the position. Reasonable accommodations will be provided for individuals with qualified disabilities both during the hiring process, as well as to allow the individual to perform the essential functions of the job, if hired.

Washington Candidates: Click here for information on the Fair Chance Act.