Zero-Trust Network Security Engineer (Zscaler)

McGough; United States; Hybrid; USD 95,000 - 110,000; Full time

Benefits offered by this job

Medical, dental, vision

Retirement plans

Parental leave

Generous paid time off

Holiday pay

Job summary

McGough is seeking a Network Security Engineer to design, implement, and operate its Zscaler environment and related security controls. You will apply zero‑trust, secure access, traffic inspection, data protection, identity, cloud, and segmentation controls across enterprise users, applications, and workloads.

You will partner with Network Engineering, Security Operations, Cloud Platform, Identity, and Application Security teams to deliver secure, scalable connectivity and policy governance

Qualifications

• 2+ years in network, cloud, or security engineering with production Zscaler experience.
• Strong knowledge of TCP/IP, routing, DNS, HTTP/S, TLS, certificates, proxies, and DLP.
• Experience designing secure internet, SaaS, private‑application, and cloud workloads in at least one major public cloud.
• Experience integrating security platforms with identity, endpoint, certificate, SIEM and IR systems.

Responsibilities

• Design, implement, administer, and troubleshoot ZIA, ZPA, Client Connector, App Connectors, traffic forwarding, TLS inspection, and DLP controls.
• Secure employee access to internet, SaaS, and private apps using identity and data‑aware policies.
• Design secure connectivity and segmentation for on‑premises and cloud workloads.
• Integrate Zscaler with identity, endpoint, cloud, certificate, SIEM, and IR platforms.

Skills

Zscaler ZIA/ZPA

TCP/IP knowledge

Secure connectivity design

Documentation & collaboration

Tools

Terraform

Python

PowerShell

REST APIs

Git

CI/CD

Job description

McGough is seeking a Network Security Engineer to design, implement, and operate its Zscaler environment and related security controls. You will apply zero‑trust, secure access, traffic inspection, data protection, identity, cloud, and segmentation controls across enterprise users, applications, and workloads.

You will partner with Network Engineering, Security Operations, Cloud Platform, Identity, and Application Security teams to deliver secure, scalable connectivity and policy governance