SASE Engineer

Gdh Consulting, Inc.; St. Louis (MO); Remote; USD 79,000 - 81,000; Full time

Job summary

GDH Consulting, Inc. is seeking a Senior Network Security Engineer to support and expand our network security and cloud services infrastructure in the PST time zone.

This fully remote role requires deep expertise in SASE, SD-WAN, and cloud-delivered security with emphasis on policy management and secure architectures. You will lead migrations from legacy networks to cloud-delivered SASE, develop runbooks, and mentor junior engineers while collaborating with Security Operations, Identity,

Qualifications

• Extensive experience with complex networks, cloud services (AWS, Azure/GCP), and SASE frameworks.
• Proven expertise with security platforms such as Netskope, Zscaler, Palo Alto, Fortinet.
• Strong understanding of Zero Trust, application segmentation, and device posture.
• Ability to troubleshoot SSL/TLS, PKI, and identity integration with SAML/OIDC, SSO, SCIM.
• Experience with routing protocols, VLANs, and cloud networking.

Responsibilities

• Serve as tier-3 escalation support for SASE, SD-WAN, and remote access incidents; conduct root-cause analysis and implement corrective actions.
• Troubleshoot complex network issues using packet capture, log analytics, and monitoring tools.
• Lead migration from legacy network infrastructure to cloud-delivered SASE services, ensuring minimal disruption.
• Develop and maintain network diagrams, policies, standards, and as-built records for audit readiness.
• Evaluate and recommend SASE and SSE vendors and features aligned with requirements and procurement decisions.
• Manage policy lifecycle, perform change control, peer reviews, testing, and staged deployment of network policies.
• Build monitoring dashboards, alerts, and reports to track platform health, user experience, and SLA adherence.
• Collaborate with Security Operations, Identity, Endpoint, and Cloud teams to meet security standards.
• Support audit and compliance activities with detailed control documentation and configuration records.
• Mentor mid-level and junior engineers, develop runbooks, and lead knowledge transfer.

Skills

Complex networks

Cloud services (AWS/Azure/GCP)

SASE frameworks

Zero Trust principles

SSL/TLS, PKI, SAML/OIDC

Network security

Python scripting

Education

CCNA/CCNP preferred

Tools

Netskope

Zscaler

Palo Alto

Fortinet

SD-WAN fabric

Job description

Role Summary

This position is responsible for supporting and expanding the organization's network security and cloud services infrastructure within the PST time zone. The role requires in-depth expertise in Secure Access Service Edge (SASE) solutions, SD-WAN, and network security principles, with a focus on cloud-delivered security services, complex network troubleshooting, and security policy management. The candidate will operate as a senior technical escalation point, lead migrations, and collaborate across teams to ensure robust, compliant, and scalable network architecture.

Responsibilities

• Serve as tier-3 escalation support for SASE, SD-WAN, and remote access incidents, conducting root cause analysis and implementing corrective actions.
• Troubleshoot complex network issues, including application latency, access failures, and security policy violations, utilizing packet capture, log analytics, and monitoring tools.
• Lead the migration from legacy network infrastructure to cloud-delivered SASE services, ensuring smooth transition and minimal service disruption.
• Develop and maintain network documentation, including diagrams, policies, standards, and as-built records for operational consistency and audit readiness.
• Evaluate and recommend SASE and SSE vendors and features, aligning solutions with organizational requirements and providing technical input on architecture and procurement decisions.
• Manage policy lifecycle, perform change control, peer reviews, testing, and staged deployment of network policies and configurations.
• Build monitoring dashboards, alerts, and reports to track platform health, user experience, and SLA adherence.
• Collaborate with Security Operations, Identity, Endpoint, and Cloud teams to ensure network policies meet security standards and application needs.
• Support audit and compliance activities by maintaining detailed control documentation and configuration records.
• Mentor mid-level and junior engineers, develop runbooks, and lead knowledge transfer initiatives to build operational resilience.

Qualifications

• Extensive experience with complex networks, cloud services (AWS, Azure, GCP), and SASE frameworks.
• Proven expertise with network security platforms such as Netskope, Zscaler, Palo Alto, Fortinet, and SD-WAN fabric design.
• Strong understanding of Zero Trust principles, application segmentation, device posture assessment, and continuous verification.
• Ability to troubleshoot advanced network issues, including SSL/TLS, PKI, and identity integration with SAML/OIDC, SSO, SCIM, Entra ID, or Okta.
• Experience with network routing protocols, VLANs, and cloud networking.
• Excellent documentation skills, including network diagrams, policy standards, and as-built records.
• Ability to work US hours in PST zone.
• Knowledge of scripting languages such as Python and automation tools is advantageous.
• Industry certifications like CCNA/CCNP are preferred.
• Strong communication skills, with the ability to articulate technical risks and trade-offs to diverse stakeholders.
• In compliance with federal law, all persons hired must verify their identity and eligibility to work in the United States and complete the required employment eligibility verification form upon hire.
• Candidates must be legally authorized to work in the United States without employer sponsorship, now or in the future.

Pay Range

Publishing Pay Range: $56.72 - $59.13 Hourly

Remote Work

This is a fully remote role and can be performed from any approved location within the United States.

About GDH

About GDH: At GDH, we believe in the power of people and the importance of caring. Our culture statement, "We care about people," isn't just a tagline - it's the core of everything we do. GDH is a premier staffing and talent solutions company dedicated to helping businesses find the best talent and assisting job seekers in finding their dream jobs.

Who We Are: GDH, founded in 2001, has grown into a leader in providing staffing solutions across various industries. We specialize in IT across several sectors, connecting top talent with leading enterprises. As a Best of Staffing firm recognized for excellence in client, employee, talent, and women's services, we pride ourselves on our commitment to quality and service.

GDH Benefits

• GDH offers a range of employee benefits that are designed to promote well-being and help maintain a healthy work-life balance. These comprehensive benefits cover various aspects of an employee's life and aim to enhance their overall experience with the company.
• Our health benefits include three medical insurance options with access to KISx Card, Zero Card, and HealthJoy concierge services.
• Other plan offerings include dental, vision, life, disability, supplemental insurance, and pet insurance plans.
• Enjoy additional perks like holiday pay, 401(k) plan, direct deposit, an employee referral program, work-life balance benefits, a Wellbeats membership, a discounted gym membership program, and more!

For more detailed information on benefits, please go to GDH's website under the tab for candidates.

Equal Employment Opportunities

GDH provides equal employment opportunities (EEO) to all employees and applicants for employment and prohibits discrimination and harassment of any type without regard to race, color, religion, gender, sex (including pregnancy), sexual orientation, gender identity, national origin, age, disability, genetic information, marital status, ancestry, protected veteran status, military or uniformed service member status, or any other status or characteristic protected by applicable federal, state, and local laws. Applicants with disabilities who require an accommodation or assistance in applying and/or for interviewing, please contact our HR Department. Please visit our notice of collection for California applicants.