Lead Engineer, Network Security Platform

Kpmg LLP
Buffalo, NY, United States
2 days ago

Role details

Contract type
Permanent contract
Employment type
Full-time (> 32 hours)
Experience level
Expert
Experience required
5 years minimum
Working hours
Regular working hours

Tech stack

Proxy Servers Microsoft Azure Cloud Computing Cloud Engineering Network Security Cisco Nexus Switches Ansible Cloud Platform System Amazon Virtual Private Cloud (VPC) Terraform Open Network Automation Platform

Job description

Experteer Overview In this role you will drive the security platform roadmap and guide the network security architecture for enterprise environments. You’ll work within the Digital Nexus technology team to integrate Zscaler, GCP and Palo Alto into the broader tech ecosystem, ensuring secure, scalable delivery. You will provide guidance, lead last-tier support, and help set standards across the security stack. This is a chance to shape a modern security platform and collaborate with cross-functional teams to deliver high-quality outcomes. Compensation / Benefits * Develop and maintain technology architecture roadmaps; align security platform with standards and industry practices * Evaluate current network security architecture and create improvement action plans; ensure integration with Zscaler, GCP, and Palo Alto * Maintain deep technical knowledge of industry trends and deliver roadmap projects on schedule and with quality * Provide guidance and enforce product development processes; meet performance and budget targets; offer last-tier operational support including root cause analysis * Design and document system configurations; establish standards and lead system installation * Offer last-tier support and training to Network team; mentor colleagues * Uphold professional integrity and foster a respectful, collaborative work environment Tasks * Minimum five years’ experience with Web proxy products (Zscaler, Palo Alto Prisma) and cloud environments (Azure, GCP); deep Palo Alto expertise (hardware Strata, VM-Series), Panorama, Prisma Access/ZIA/ZPA * Bachelor’s degree preferred; high school diploma or GED required * Hands-on GCP engineering experience (VPC design, Cloud Armor) and integration of security appliances in cloud-native setups * Proven experience in Zscaler platform engineering (ZIA, ZPA) design and management * Strong background in network automation and Infrastructure as Code (Terraform, Ansible) * Excellent verbal/written communication; ability to lead, delegate, and collaborate with cross-functional teams * Authorized to work in the U.S. without visa sponsorship now or in the future Key requirements * comprehensive compensation and benefits package * medical and dental plans * vision coverage * 401(k) plans * well-being benefits * Personal Time Off and holidays

Requirements

meet performance and budget targets; offer last-tier operational support including root cause analysis * Design and document system configurations; establish standards and lead system installation * Offer last-tier support and training to Network team; mentor colleagues * Uphold professional integrity and foster a respectful, collaborative work environment Tasks * Minimum five years’ experience with Web proxy products (Zscaler, Palo Alto Prisma) and cloud environments (Azure, GCP); deep Palo Alto expertise (hardware Strata, VM-Series), Panorama, Prisma Access/ZIA/ZPA * Bachelor’s degree preferred; high school diploma or GED required * Hands-on GCP engineering experience (VPC design, Cloud Armor) and integration of security appliances in cloud-native setups * Proven experience in Zscaler platform engineering (ZIA, ZPA) design and management * Strong background in network automation and Infrastructure as Code (Terraform, Ansible) * Excellent verbal/written communication; ability to lead, aa Zscaler and collaborate with cross-functional teams * Authorized to work in the U.S. without visa sponsorship now or in the future Key requirements * comprehensive compensation and benefits package * medical and dental plans * vision coverage * 401(k) plans * well-being benefits * Personal Time Off and holidays

Apply for this position

This job is hosted externally. Click below to view the full posting and apply.

Apply on us.experteer.com

Good distractions

Talks and stories from around this role — technically off-topic, practically not.

1:42 min

Automating Skupper deployments using Ansible

Alex Soto Alex Soto · WWC 2024

1:34 min

Essential commands for running and testing Terraform configurations

Hennie Francis · LIVE

2:14 min

Understanding the basic mechanics of automated web scraping

Vidas Bacevičius Vidas Bacevičius · WWC 2025

1:34 min

Pivoting careers into specialized platform engineering roles

Xavier Portilla Edo · LIVE

3:19 min

Executing complex workflows using Ansible Automation Platform

Goetz Rieger Goetz Rieger · WWC 2025

3:22 min

Transitioning from software engineering to security roles

Anna Oliveira · Coffee With Developers

Videos

See all

Related articles

See all