SENIOR NETWORK SECURITY ENGINEER

Jobgether; United States; On-site; USD 120,000 - 140,000; Full time

Benefits offered by this job

Health insurance

401(k) plan with match

Paid time off

Job summary

Jobgether in the United States seeks a Senior Network Security Engineer to lead the design, deployment, and maintenance of secure network access across cloud and on‑prem environments, focusing on Zero Trust.

You will own the Zscaler ecosystem (ZIA, ZPA, ZTNA) and work with cybersecurity, cloud, and enterprise teams to modernize connectivity on AWS while balancing security with user experience.

Qualifications

• 5+ years in network security or related field.
• Experience configuring Zscaler at scale.
• Understanding of ZTNA principles and least-privilege access.

Responsibilities

• Collaborate across technology teams to design and support enterprise networks.
• Lead optimization of security platforms and long-term solutions.
• Perform regular backup and restoration testing on schedules.
• Provide Tier 3 support for Network Services incidents.
• Develop and maintain runbooks and network diagrams.

Skills

Zscaler ZIA/ZPA

Zero Trust

AWS networking

Network security

SAML/OIDC/MFA

SIEM/Log analysis

Incident response

Technical leadership

Education

Bachelor's degree in CS or equivalent

Tools

Zscaler platform

AWS networking tools

Job description

This position is listed on behalf of a partner company, who manages all applications and next steps. Our partner is looking for a Senior Network Security Engineer based in the United States.

The Senior Network Security Engineer will lead the design, deployment, and maintenance of secure network access solutions across cloud and on-premises environments. This role focuses on advancing Zero Trust architecture and strengthening enterprise security through modern technologies and industry best practices. You will take ownership of the Zscaler security ecosystem, including ZIA, ZPA, and ZTNA, while supporting secure connectivity across AWS infrastructure. Working closely with cybersecurity, cloud, and enterprise technology teams, you will drive infrastructure modernization and improve application access security. You will also lead technical initiatives, optimize network performance, and resolve complex security challenges. This is an opportunity to shape large-scale network security architecture while contributing to a resilient, innovative, and continuously evolving technology environment.

Accountabilities

Responsibilities

• Collaborate across technology teams to research, design, troubleshoot, and support enterprise network environments across on-premises and cloud infrastructure.
• Lead network security platform optimization initiatives and develop long-term solutions to recurring technical challenges.
• Perform regular backup and restoration testing and validation on weekly, monthly, and quarterly schedules.
• Provide Tier 3 technical support for incidents involving technologies managed by the Network Services team.
• Serve as the subject matter expert for the Zscaler Zero Trust Exchange suite, including ZIA, ZPA, Zscaler Client Connector (ZCC), and ZDX.
• Manage Zscaler tenant configurations, security policies, and platform lifecycle activities.
• Deploy, validate, and maintain ZPA App Connectors across AWS, on-premises, and branch environments to enable least-privilege, application-specific access.
• Design and optimize granular security policies covering application segmentation, URL filtering, SSL/TLS inspection, cloud firewall, sandboxing, and Data Loss Prevention (DLP).
• Configure and maintain forwarding profiles, SSL inspection, and secure web gateway controls while balancing security requirements with user experience.
• Lead a proof of concept evaluating Zscaler Zero Trust Exchange for private application access in AWS and contribute to the long-term network connectivity modernization roadmap.
• Monitor platform health, security events, and digital experience through ZDX.
• Troubleshoot connectivity, authentication, and policy enforcement issues using system logs, packet captures, and HAR files.
• Integrate Zscaler solutions with identity providers such as Microsoft Entra ID using SAML and OIDC to support Single Sign-On (SSO), Multi-Factor Authentication (MFA), and conditional access.
• Support Zscaler Client Connector deployments through endpoint management platforms such as Microsoft Intune.
• Participate in incident, problem, and change management processes, including Change Advisory Board (CAB)-controlled activities.
• Develop and maintain technical documentation, operational runbooks, standard operating procedures, and network architecture diagrams.

Requirements

• 5+ years of experience in network security, cybersecurity engineering, or network engineering with a strong focus on security.
• Hands-on experience administering Zscaler ZIA and ZPA at scale, including security policy configuration, Client Connector deployment, and App Connector hosting.
• Practical understanding of Zero Trust Network Access (ZTNA) principles and least-privilege, application-specific access models.
• Working knowledge of AWS networking components, including VPCs, route tables, security groups, Transit Gateway, and PrivateLink.
• Strong familiarity with identity management and authentication technologies, including SAML 2.0, OIDC, Microsoft Entra ID, MFA, and conditional access.
• Solid understanding of core networking concepts such as TCP/IP, DNS, DHCP, routing, and SSL/TLS certificates.
• Ability to analyze logs, packet captures, and HAR files to identify, troubleshoot, and resolve complex technical issues.
• Strong knowledge of network security protocols and technologies, including IPsec, SSL/TLS, IDS/IPS, Web Application Firewalls (WAF), and DDoS protection.
• Experience designing and supporting cloud and hybrid cloud network environments, particularly within AWS.
• Bachelor's degree in Computer Science or an equivalent combination of education and professional experience.
• Excellent written and verbal communication skills.
• Strong analytical thinking, troubleshooting, and problem-solving abilities.
• Positive, proactive, and solutions-oriented approach to technical challenges.
• Ability to explain complex technical concepts clearly to both technical and non-technical stakeholders.

Nice To Have

• Experience with AWS WAF and AWS Firewall Manager.
• Familiarity with Aviatrix networking solutions.
• Scripting and automation experience using PowerShell, Python, or Terraform, including Zscaler Terraform providers.
• AWS Cloud Practitioner or equivalent cloud certification.
• Zscaler certifications such as ZIA Certified Administrator, ZPA Professional, Zscaler Digital Transformation Administrator (ZDTA), or Zscaler Digital Experience Administrator (ZDXA).
• AWS Advanced Networking Specialty certification.
• Security certifications such as CompTIA Security+ or SANS/GIAC.
• ITIL v3 Foundation certification.

Benefits

• Annual salary ranging from $120,000 to $140,000.
• Medical, dental, and vision insurance.
• Life and accidental death insurance.
• Short-term and long-term disability insurance.
• Retirement savings plan.
• Paid time off and holiday leave, depending on location.
• Paid parental leave and personal leave options.
• Flexible Spending Accounts (FSAs).
• Employee Assistance Program.
• Health and wellness programs.Associate shopping program and discount marketplace.
• Identity theft protection.
• Pet insurance.
• Commuter benefits.
• Opportunities to work in a collaborative technology environment with access to professional development and career growth.