Senior Security Engineer (SASE/ZTNA)

World Wide Technology; Maryland Heights (MO); On-site; USD 120,000 - 155,000; Full time

Job summary

World Wide Technology is seeking a SASE/ZTNA Security Engineer to design, implement, and operate Zero Trust architectures across GCCH and Commercial environments. You will own access policy design and telemetry integration, enabling compliant, identity-driven security across platforms.

The role requires hands-on experience, strong scripting skills, and leadership to mentor junior engineers while aligning initiatives with business needs. U.S. citizenship is required for GCCH access.

Qualifications

• Bachelor's degree or equivalent in cybersecurity, CS, IT, or related field.
• 5+ years hands-on SASE/ZTNA in production enterprise environments.
• Strong practical knowledge of ZTNA, SASE, CASB, SD-WAN, TLS/PKI, DNS and core networking.

Responsibilities

• Design, implement, and operate ZTNA and SASE architectures across GCCH and Commercial environments.
• Own identity-driven access control including policy design with SAML/OIDC/SCIM providers.
• Serve as senior escalation point for ZTNA/SASE incidents and perform root cause analysis.
• Develop dashboards and KPIs to communicate ZTNA/SASE performance and risk.
• Mentor junior engineers on architecture, troubleshooting, and secure access principles.
• Collaborate with identity, network, and compliance teams to align initiatives.
• Integrate adjacent technologies and ensure compliance with NIST and CMMC controls.

Skills

ZTNA / SASE

Identity federation

Conditional access design

Python / PowerShell / Bash

NIST 800-53 / 800-171 / CMMC knowledge

Networking fundamentals

Communication skills

GCCH and Commercial environments

Mentoring juniors

Education

Bachelor's degree or equivalent

Tools

Okta / Azure AD (Entra)

SIEM

SOAR

EDR / device posture

SAML / OIDC / SCIM tooling

Job description

World Wide Technology (WWT) strives to make a new world happen. WWT's work benefits clients and partners as much as it does its people and community across the globe.

Founded in 1990, WWT brings together strategy, deep technical expertise and world-class partnerships to help public and private sector organizations design, build and scale intelligent AI, digital, cybersecurity, cloud and infrastructure solutions. Through its Advanced Technology Center (ATC) - a collaborative ecosystem featuring state-of-the‑art hardware and software - WWT enables clients and partners to conceptualize, test and validate innovative technology and then deploy solutions at scale using its global integration and distribution capabilities.

With more than 14,000 team members and over 60 locations globally, WWT's culture - grounded in core values and leadership philosophies - has been recognized by Fortune® and Great Place to Work for its commitment to innovation, trust and creating a great place to work for all. WWT provides products and services to large enterprise, global service provider and public sector clients in up to 130 countries across six continents. Softchoice, a World Wide Technology company, supports commercial and SMB markets in the U.S. and Canada.

What is the Internal WWT IT Team, and why join?

The Internal WWT IT team is the backbone of our company’s technological infrastructure, ensuring seamless operations and continuous innovation. Our team is dedicated to managing and supporting the company’s technology infrastructure, ensuring the smooth operation of hardware, software, networks, and data systems, while providing top-notch technical support to employees.

By joining the Internal WWT IT team, you will play a crucial role in maintaining the efficiency and security of our IT environment, enabling the company to achieve its strategic goals. The Internal IT team offers the opportunity to work in a dynamic and collaborative environment, where your contributions will have a direct impact on the company's success.

The SASE/ZTNA Security Engineer designs, implements, and operates Zero Trust Network Access and Secure Access Service Edge architecture across WWT's GCCH and Commercial environments. This role owns ZTNA policy and identity-driven access architecture. Including session management, access policy design, and telemetry integration for compliance reporting.

This position requires U.S. citizenship due to access requirements within the GCCH environment.

Responsibilities

• Design, implement, and operate ZTNA and SASE architecture, including access policy, session management, and steering/proxy configuration across both GCCH and Commercial environments.
• Own identity-driven access control integration, including conditional access policy design with SAML/OIDC/SCIM-based identity providers.
• Serve as the senior escalation point for complex ZTNA/SASE incidents, conducting root cause analysis and driving resolution.
• Utilize ZTNA/SASE session telemetry to support user access reviews, compliance reporting, and incident investigation.
• Map ZTNA/SASE controls to NIST 800-53 and CMMC control families (e.g., AC-17, AC-4, SC-7) and produce audit-ready evidence for GCCH and Commercial compliance requirements.
• Develop and maintain dashboards and KPIs that communicate ZTNA/SASE performance, access risk, and policy health to technical stakeholders.
• Build AI integrations and automations for reporting, routine tasks, and recurring compliance workflows, aligned with the broader security automation strategy.
• Collaborate with identity, network, and compliance teams to align ZTNA/SASE initiatives with business and regulatory needs across both operating environments.
• Evaluate and integrate SASE/ZTNA- adjacent technologies (device posture/EDR signal, SOAR-driven response workflows) with existing platforms.
• Mentor junior engineers on ZTNA/SASE architecture, troubleshooting, and secure access principles.
• Engage with external vendors and partners to evaluate and integrate SASE/ZTNA technologies.
• Maintain documentation, runbooks, and knowledge base articles for ZTNA/SASE operations and troubleshooting.

,

Qualifications

• Bachelor's degree in Cybersecurity, Computer Science, Information Technology, or a related discipline preferred; an equivalent combination of education, training, and relevant experience will be considered in lieu of a degree.
• A minimum of 5 years of hands-on experience with SASE/ZTNA platforms in production enterprise environments
  • Experience with the following technologies: ZTNA, SASE, CASB, SWG, SD-WAN, TLS/PKI, DNS and core networking/routing, SIEM, SOAR, EDR/device posture integration, SAML/OIDC/SCIM identity federation (Okta and/or Azure AD/Entra), IAM/conditional access, cloud (Azure, AWS), Linux, Windows.
  • Experience with the following standards: NIST 800-53, NIST 800-171, CMMC, SOC 1/2, ISO 27001.
• Deep understanding of Zero Trust Network Access and Secure Access Service Edge models applied hands-on rather than at a conceptual level.
• Strong grasp of underlying network fundamentals (TLS/PKI, DNS, routing, TCP/IP) sufficient to troubleshoot below the vendor UI.
• Skilled in identity federation and conditional access policy design across SAML/OIDC/SCIM-based identity providers.
• Proficient in Python, PowerShell, or Bash to automate policy management, reporting, and compliance workflows.
• Working knowledge of NIST 800-53, NIST 800-171, and CMMC control families as they apply to access control.
• Extensive troubleshooting experience in regard to traffic decryption and certificate trusts.
• Strong communication skills to work across identity, network, compliance, and leadership teams in both GCCH and Commercial contexts.
• Excellent analytical and problem-solving skills, with the ability to balance operational needs, user experience, and security/compliance risk.
• This position requires U.S. citizenship due to access requirements within the GCCH environment.

Preferred

• Experience operating in both FedR