Senior Cybersecurity Engineer – Secure Access & Network Security

Sentara Health; Norfolk (VA); On-site; USD 126,000 - 198,000; Full time

Job summary

Sentara Health in Norfolk, VA seeks a Senior Cybersecurity Engineer to design, implement, and support enterprise security technologies across a large environment, with focus on SSE, Zero Trust, and Zscaler.

You will own complex security projects, lead architecture through deployment, stabilize operations, and mentor teams while collaborating with cybersecurity, network, cloud, identity, and endpoint groups.

Qualifications

• Experience supporting SSE/SASE and zero-trust security technologies.
• Hands-on engineering with Zscaler technologies (ZIA/ZPA/ZCC/ZDX).
• Strong networking and troubleshooting across TCP/IP, DNS, firewalls, VPN, PKI/certificates.
• Experience with identity and cloud tech (Entra ID/AD, SAML, OAuth, MFA, CA, Azure).
• Ability to lead complex security implementations from architecture to handoff.

Responsibilities

• Own and drive security design, implementation, and optimization across enterprise tech.
• Lead cross-functional discussions with cybersecurity, network, cloud, identity, and endpoint teams.
• Translate architectural direction into scalable security solutions.
• Mentor engineers and improve automation and operational support.
• Provide production troubleshooting and documentation from design through handoff.

Skills

SSE/SASE

Zero Trust

Zscaler

Network troubleshooting

Technical leadership

Education

Bachelor’s Degree in CS/IT

Tools

Zscaler suite

Active Directory

Azure

SAML/OAuth

Job description

Overview

We are seeking an experienced Senior Cybersecurity Engineer to join our Cybersecurity Engineering team and help design, implement, optimize, and support enterprise security technologies across a large, complex environment.

This role will have an immediate focus on Secure Service Edge (SSE), Zero Trust, and Zscaler technologies, while also working across network security, cloud, identity, and endpoint security initiatives.

The ideal candidate is a highly capable hands-on engineer who combines deep technical troubleshooting skills, strong networking fundamentals, security expertise, and technical leadership. This individual should be comfortable taking ownership of complex problems, working across multiple technology domains, and driving initiatives from architecture and design through implementation, production stabilization, and operational handoff.

We are looking for someone who does more than configure technology—we want an engineer who understands how and why the technology works, can determine why it isn’t working when problems occur, and can collaborate across teams to drive issues to resolution.

Technical Leadership & Collaboration

• Takes ownership of complex technical issues, using a methodical, evidence-based approach to drive root-cause identification and resolution.
• Translates architectural direction into scalable technical solutions, identifying risks, dependencies, and operational considerations throughout implementation.
• Leads cross-functional technical discussions and troubleshooting across cybersecurity, network, cloud, identity, endpoint, and infrastructure teams.
• Communicates complex technical findings, risks, and recommendations clearly to technical and non-technical stakeholders, leadership, and vendors.
• Mentors engineers, promotes knowledge sharing, and identifies opportunities to improve automation, reliability, processes, and operational support.

Education

• Bachelor’s Degree in Computer Science, Cybersecurity, Information Technology, or a related field preferred.

Certification/Licensure

• Zscaler, CCNP/CCIE, PCNSE, Microsoft Security/Azure, CISSP, or Security+ certifications preferred.

Experience

• Extensive hands-on cybersecurity engineering experience supporting SSE/SASE, Zero Trust, network security, cloud security, or related enterprise security technologies.
• Strong experience with Zscaler technologies, including ZIA, ZPA, ZCC, ZDX, GRE/IPsec tunnels, SSL/TLS inspection, proxy/traffic forwarding, and policy troubleshooting.
• Strong networking and troubleshooting expertise across TCP/IP, DNS, routing, firewalls, VPN, PKI/certificates, HTTP/HTTPS, proxies, and application connectivity, including packet and log analysis.
• Experience with enterprise identity and cloud technologies, including Microsoft Entra ID/Active Directory, SAML, OAuth/OIDC, MFA, Conditional Access, and Azure or comparable cloud platforms.
• Demonstrated ability to lead complex security implementations and production troubleshooting from architecture/design through implementation, stabilization, documentation, and operational handoff.

We provide market-competitive compensation packages, inclusive of base pay, incentives, and benefits. The base pay range for full-time employment is $126,152.00 - $198,161.60 annually. Additional compensation may be available for this role, such as shift differentials, on-call pay, shift premiums, extra-shift incentives, or bonus opportunities. Compensation within the range may vary based on qualifications, experience, location, market conditions, and business needs. Note: If an annual salary is posted, it is based on a full-time colleague working 2,080 hours annually.Sentara offers a comprehensive benefits package, including medical, dental, vision, life and disability insurance; 401(k)/403(b) with employer match; paid time off (vacation, sick time, and holidays); paid parental and military leave; educational assistance or student loan repayment; and voluntary benefits.