Senior Cybersecurity Engineer – Secure Access & Network Security

Sentara Health; Richmond (VA); On-site; USD 126,000 - 198,000; Full time

Benefits offered by this job

Medical, Dental, Vision plans

Paid Time Off & Holidays

401k/403b with match

Educational assistance

Job summary

Sentara Health seeks a Senior Cybersecurity Engineer to design, implement, and support enterprise security technologies. Focus on SSE, Zero Trust, and Zscaler, with work across network, cloud, identity, and endpoints.

You will lead complex issues from architecture to production, mentor engineers, and improve security automation while collaborating with multiple teams and stakeholders.

Qualifications

• Bachelor’s degree in Computer Science, Cybersecurity, Information Technology, or related field preferred.
• Extensive hands-on cybersecurity engineering experience with SSE/SASE, Zero Trust, or related enterprise security tech.
• Experience with Zscaler technologies (ZIA, ZPA, ZCC, ZDX) and security troubleshooting.

Responsibilities

• Own complex technical issues with evidence-based root-cause analysis.
• Translate architecture into scalable security solutions and note risks.
• Lead cross-functional security discussions across teams including network and cloud.
• Communicate findings clearly to stakeholders and vendors.
• Mentor engineers and improve automation and reliability.

Tools

Zscaler

ZIA

ZPA

GRE/IPsec

SSL/TLS inspection

Proxy/traffic forwarding

TLS inspection

DNS

PKI/certificates

Active Directory / Entra ID

SAML/OIDC

Azure

Job description

City/StateNorfolk, VA

Work ShiftFirst (Days)

Overview:Overview

We are seeking an experienced Senior Cybersecurity Engineer to join our Cybersecurity Engineering team and help design, implement, optimize, and support enterprise security technologies across a large, complex environment. This role will have an immediate focus on Secure Service Edge (SSE), Zero Trust, and Zscaler technologies, while also working across network security, cloud, identity, and endpoint security initiatives. The ideal candidate is a highly capable hands‑on engineer who combines deep technical troubleshooting skills, strong networking fundamentals, security expertise, and technical leadership. This individual should be comfortable taking ownership of complex problems, working across multiple technology domains, and driving initiatives from architecture and design through implementation, production stabilization, and operational handoff. We are looking for someone who does more than configure technology—we want an engineer who understands how and why the technology works, can determine why it isn’t working when problems occur, and can collaborate across teams to drive issues to resolution.

Technical Leadership & Collaboration

• Takes ownership of complex technical issues, using a methodical, evidence-based approach to drive root‑cause identification and resolution.
• Translates architectural direction into scalable technical solutions , identifying risks, dependencies, and operational considerations throughout implementation.
• Leads cross‑functional technical discussions and troubleshooting across cybersecurity, network, cloud, identity, endpoint, and infrastructure teams.
• Communicates complex technical findings, risks, and recommendations clearly to technical and non‑technical stakeholders, leadership, and vendors.
• Mentors engineers, promotes knowledge sharing, and identifies opportunities to improve automation, reliability, processes, and operational support.

Education

Bachelor’s Degree in Computer Science, Cybersecurity, Information Technology, or a related field preferred.

Certification/Licensure

Zscaler, CCNP/CCIE, PCNSE, Microsoft Security/Azure, CISSP, or Security+ certifications preferred.

Experience

• Extensive hands‑on cybersecurity engineering experience supporting SSE/SASE, Zero Trust, network security, cloud security, or related enterprise security technologies.
• Strong experience with Zscaler technologies, including ZIA, ZPA, ZCC, ZDX, GRE/IPsec tunnels, SSL/TLS inspection, proxy/traffic forwarding, and policy troubleshooting.
• Strong networking and troubleshooting expertise across TCP/IP, DNS, routing, firewalls, VPN, PKI/certificates, HTTP/HTTPS, proxies, and application connectivity, including packet and log analysis.
• Experience with enterprise identity and cloud technologies, including Microsoft Entra ID/Active Directory, SAML, OAuth/OIDC, MFA, Conditional Access, and Azure or comparable cloud platforms.
• Demonstrated ability to lead complex security implementations and production troubleshooting from architecture/design through implementation, stabilization, documentation, and operational handoff.

We provide market‑competitive compensation packages, inclusive of base pay, incentives, and benefits. The base pay range for full‑time employment is $126,152.00 - $198,161.60 annually. Additional compensation may be available for this role, such as shift differentials, on‑call pay, shift premiums, extra‑shift incentives, or bonus opportunities. Compensation within the range may vary based on qualifications, experience, location, market conditions, and business needs. Note: If an annual salary is posted, it is based on a full‑time colleague working 2,080 hours annually.

Sentara offers a comprehensive benefits package, including medical, dental, vision, life and disability insurance; 401(k)/403(b) with employer match; paid time off (vacation, sick time, and holidays); paid parental and military leave; educational assistance or student loan repayment; and voluntary benefits.

Benefits: Caring For Your Family and Your Career

• Medical, Dental, Vision plans
• Adoption, Fertility and Surrogacy Reimbursement up to $10,000
• Paid Time Off and Sick Leave
• Paid Parental & Family Caregiver Leave
• Emergency Backup Care
• Long-Term, Short-Term Disability, and Critical Illness plans
• Life Insurance
• 401k/403B with Employer Match
• Tuition Assistance – $5,250/year and discounted educational opportunities through Guild Education
• Student Debt Pay Down – $10,000
• Pet Insurance
• Legal Resources Plan
• Colleagues have the opportunity to earn an annual discretionary bonus if established system and employee eligibility criteria is met.

Sentara Health is an equal opportunity employer and prides itself on the diversity and inclusiveness of its close to an almost 30,000‑member workforce. Diversity, inclusion, and belonging is a guiding principle of the organization to ensure its workforce reflects the communities it serves.

In support of our mission “to improve health every day,” this is a tobacco‑free environment.

For positions that are available as remote work, Sentara Health employs associates in the following states: Alabama, Delaware, Florida, Georgia, Idaho, Indiana, Kansas, Louisiana, Maine, Maryland, Minnesota, Nebraska, Nevada, New Hampshire, North Carolina, North Dakota, Ohio, Oklahoma, Pennsylvania, South Carolina, South Dakota, Tennessee, Texas, Utah, Virginia, Washington, West Virginia, Wisconsin, and Wyoming.