Senior Network Engineer - Access and Edge

Mobility Global; Virginia (MN); On-site; USD 120,000 - 160,000; Full time

Job summary

Mobility seeks an Access and Edge Network Engineer to operate, optimize, and evolve a large estate of remote access VPNs, on‑premises firewalls, NAC, and micro‑segmentation across campus and data centers. This hands‑on role requires strong experience with Zscaler, Fortinet, Cisco ISE, Guardicore, and Palo Alto, plus the ability to troubleshoot complex connectivity and security policy issues.

The ideal candidate will support secure internet access and zero‑trust connectivity while working in a

Qualifications

• 5+ years of network engineering experience focusing on access control and edge networking.
• Hands-on with at least two platforms among Zscaler, Fortinet, Cisco ISE, Guardicore.
• Experience managing enterprise-scale remote access VPN.
• Strong routing, switching, and security protocol knowledge.

Responsibilities

• Operate and optimize a large remote access VPN environment.
• Administer on-premise firewalls across campus and data center locations.
• Manage Cisco ISE and Guardicore micro-segmentation.
• Maintain secure internet access via Zscaler and similar zero-trust tools.
• Troubleshoot complex connectivity and security policy issues.

Skills

Network security

Edge networking

VPN management

Troubleshooting

Tools

Zscaler

Fortinet

Cisco ISE

Guardicore

Palo Alto

Job description

We are seeking an Access and Edge Network Engineer to operate and evolve a large estate of remote access VPN, on‑premises firewalls, network access control (ISE), and micro‑segmentation (Guardicore) infrastructure across campus and data center environments. This is a hands‑on role managing the technologies that control how users, devices, and workloads connect to and traverse the network.

Key Responsibilities

• Manage and operate a large‑scale remote access VPN environment for a distributed workforce.
• Administer on‑premises firewalls (Fortinet and Palo Alto) across campus and data center locations, including policy management and rule lifecycle.
• Administer Cisco ISE.
• Deploy and manage Guardicore micro‑segmentation to enforce workload‑level security policies in the data center.
• Operate Zscaler (ZIA, ZPA) for secure internet access and zero‑trust private application connectivity.
• Operate Prisma for secure internet access and zero‑trust private application connectivity.
• Troubleshoot complex connectivity and access issues spanning VPN, firewall, NAC, and micro‑segmentation platforms.

Required Qualifications

• 5+ years of network engineering experience focused on access control, perimeter security, and edge networking.
• Hands‑on production experience with at least two of the following (MANDATORY): Zscaler, Fortinet, Cisco ISE, Guardicore.
• Demonstrated experience managing remote access VPN at enterprise scale.
• Strong experience administering on‑premises firewalls in campus and data center environments.
• Solid understanding of core networking and security protocols: TCP/IP, IPsec, 802.1X, RADIUS, DNS, DHCP.
• Experience working in large enterprise environments with a sizable device and user population.

Preferred Qualifications

• Experience with all four platforms (Zscaler, Palo Alto, Fortinet, ISE, Guardicore).
• Experience with network automation (Python, Ansible, or vendor APIs).
• Familiarity with zero‑trust network access principles.

It is the policy of Mobility to provide equal employment opportunity (EEO) to all persons regardless of age, color, national origin, citizenship status, physical or mental disability, race, religion, creed, gender, sex, sexual orientation, gender identity and/or expression, genetic information, marital status, status with regard to public assistance, veteran status, or any other characteristic protected by federal, state or local law. In addition, Mobility will provide reasonable accommodations for qualified individuals with disabilities.