Senior Cybersecurity Engineer – Secure Access & Network Security

101 Sentara Hospitals; Virginia; Hybrid; USD 126,000 - 198,000; Full time

Benefits offered by this job

Medical benefits

PTO & Sick Leave

Tuition assistance

Student debt payoff

Life Insurance

Job summary

Sentara Health seeks a Senior Cybersecurity Engineer to design, implement, and support enterprise security across SSE, Zero Trust, and Zscaler platforms. You will own architecture, troubleshoot complex problems, and collaborate across networking, cloud, identity, and endpoint teams to drive solutions.

The role emphasizes hands-on leadership, production stability, and clear communication with stakeholders. A Bachelor’s in a related field and relevant certifications are preferred.

Qualifications

• Bachelor's degree preferred in CS, Cybersecurity or IT.
• Extensive hands-on security engineering experience in SSE/SASE and Zero Trust.
• Strong networking and security troubleshooting across TCP/IP, DNS, firewalls, VPN, PKI.

Responsibilities

• Own complex security implementations from architecture to production handoff.
• Lead cross-functional security discussions with network, cloud, identity and infrastructure teams.
• Mentor engineers and drive automation, reliability and operational processes.

Skills

SSE/SASE

Zero Trust

Networking

Education

Bachelor's Degree in CS/IT

Tools

Zscaler

CCNP/CCIE

PCNSE

Azure Security

CISSP

Security+

Job description

City/State Norfolk, VA

Work Shift First (Days)

Overview: Overview

We are seeking an experienced Senior Cybersecurity Engineer to join our Cybersecurity Engineering team and help design, implement, optimize, and support enterprise security technologies across a large, complex environment. This role will have an immediate focus on Secure Service Edge (SSE), Zero Trust, and Zscaler technologies, while also working across network security, cloud, identity, and endpoint security initiatives. The ideal candidate is a highly capable hands‑on engineer who combines deep technical troubleshooting skills, strong networking fundamentals, security expertise, and technical leadership. This individual should be comfortable taking ownership of complex problems, working across multiple technology domains, and driving initiatives from architecture and design through implementation, production stabilization, and operational handoff. We are looking for someone who does more than configure technology—we want an engineer who understands how and why the technology works, can determine why it isn’t working when problems occur, and can collaborate across teams to drive issues to resolution.

Technical Leadership & Collaboration

Takes ownership of complex technical issues, using a methodical, evidence‑based approach to drive root‑cause identification and resolution. Translates architectural direction into scalable technical solutions, identifying risks, dependencies, and operational considerations throughout implementation. Leads cross‑functional technical discussions and troubleshooting across cybersecurity, network, cloud, identity, endpoint, and infrastructure teams. Communicates complex technical findings, risks, and recommendations clearly to technical and non‑technical stakeholders, leadership, and vendors. Mentors engineers, promotes knowledge sharing, and identifies opportunities to improve automation, reliability, processes, and operational support.

Education

Bachelor’s Degree in Computer Science, Cybersecurity, Information Technology, or a related field preferred.

Certification/Licensure

Zscaler, CCNP/CCIE, PCNSE, Microsoft Security/Azure, CISSP, or Security+ certifications preferred.

Experience

Extensive hands‑on cybersecurity engineering experience supporting SSE/SASE, Zero Trust, network security, cloud security, or related enterprise security technologies. Strong experience with Zscaler technologies, including ZIA, ZPA, ZCC, ZDX, GRE/IPsec tunnels, SSL/TLS inspection, proxy/traffic forwarding, and policy troubleshooting. Strong networking and troubleshooting expertise across TCP/IP, DNS, routing, firewalls, VPN, PKI/certificates, HTTP/HTTPS, proxies, and application connectivity, including packet and log analysis. Experience with enterprise identity and cloud technologies, including Microsoft Entra ID/Active Directory, SAML, OAuth/OIDC, MFA, Conditional Access, and Azure or comparable cloud platforms. Demonstrated ability to lead complex security implementations and production troubleshooting from architecture/design through implementation, stabilization, documentation, and operational handoff.

We provide market‑competitive compensation packages, inclusive of base pay, incentives, and benefits. The base pay range for full‑time employment is $126,152.00 - $198,161.60 annually. Additional compensation may be available for this role, such as shift differentials, on‑call pay, shift premiums, extra‑shift incentives, or bonus opportunities. Compensation within the range may vary based on qualifications, experience, location, market conditions, and business needs. Note: If an annual salary is posted, it is based on a full‑time colleague working 2,080 hours annually. Sentara offers a comprehensive benefits package, including medical, dental, vision, life and disability insurance; 401(k)/403(b) with employer match; paid time off (vacation, sick time, and holidays); paid parental and military leave; educational assistance or student loan repayment; and voluntary benefits.

Benefits:

Caring For Your Family and Your Career

• Medical, Dental, Vision plans
• Adoption, Fertility and Surrogacy Reimbursement up to $10,000
• Paid Time Off and Sick Leave
• Paid Parental & Family Caregiver Leave
• Emergency Backup Care
• Long‑Term, Short‑Term Disability, and Critical Illness plans
• Life Insurance
• 401k/403B with Employer Match
• Tuition Assistance – $5,250/year and discounted educational opportunities through Guild Education
• Student Debt Pay Down – $10,000
• Pet Insurance
• Legal Resources Plan
• Colleagues have the opportunity to earn an annual discretionary bonus if established system and employee eligibility criteria is met.

Sentara Health is an equal opportunity employer and prides itself on the diversity and inclusiveness of its close to an almost 30,000‑member workforce. Diversity, inclusion, and belonging is a guiding principle of the organization to ensure its workforce reflects the communities it serves. In support of our mission “to improve health every day,” this is a tobacco‑free environment. For positions that are available as remote work, Sentara Health employs associates in the following states: Alabama, Delaware, Florida, Georgia, Idaho, Indiana, Kansas, Louisiana, Maine, Maryland, Minnesota, Nebraska, Nevada, New Hampshire, North Carolina, North Dakota, Ohio, Oklahoma, Pennsylvania, South Carolina, South Dakota, Tennessee, Texas, Utah, Virginia, Washington, West Virginia, Wisconsin, and Wyoming.

Sentara Health is a Virginia and Northeastern North Carolina based not‑for‑profit integrated healthcare provider that has been in business for over 131 years. Offering hundreds of sites of care including 12 hospitals, PACE, home health, hospice, medical groups, imaging services, therapy, outpatient surgery centers, and an 858,000 member health plan. The people of the communities that we serve have nominated Sentara “Employer of Choice” for over ten years. U.S. News and World Report has recognized Sentara as having the Best Hospitals for 15+ years. Sentara offers professional development and a continued employment philosophy!