> Markdown version of [/jobs/ext/2008436-lead-engineer-network-security-platform](https://www.wearedevelopers.com/jobs/ext/2008436-lead-engineer-network-security-platform). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md). --- # Lead Engineer, Network Security Platform - **Company:** Kpmg LLP - **Location:** Boulder County, CO, United States - **Experience:** Expert - **Contract:** Permanent contract - **Skills:** Proxy Servers, Microsoft Azure, Cloud Computing, Cyber Security, Network Security, Cisco Nexus Switches, Ansible, Cloud Platform System, Amazon Virtual Private Cloud (VPC), Terraform, Open Network Automation Platform - **Published:** August 9, 2026 - **Apply:** https://us.experteer.com/career/view-jobs/lead-engineer-network-security-platform-boulder-co-usa-58865488 ## About the Role system installation * Train and mentor Network team; support cross-functional collaboration * Uphold professional integrity and a respectful work environment Tasks * 5+ years of experience with Web proxy products (Zscaler, Palo Alto Prisma, etc.) and cloud environments (Azure, GCP) * Deep expertise with Palo Alto firewalls (Strata, VM-Series), Panorama, Prisma Access/ZIA/ZPA * Hands-on GCP engineering focus: VPC design, Cloud Armor; integrate security appliances in cloud-native environments * Proven experience with Zscaler platform engineering (ZIA and ZPA) * Strong background in Network Automation and IaC (Terraform, Ansible) * Excellent communication and leadership abilities; able to manage multiple projects and lead teams * Authorized to work in the U.S. without sponsorship now or in the future Key requirements * comprehensive benefits package * medical and dental plans * vision coverage * disability and life insurance * 401(k) with plan options * Well-being benefits ## Description Experteer Overview As Lead Engineer in the Digital Nexus technology team, you drive security architecture and platform roadmaps, aligning them with industry standards to strengthen the organization's network defenses. You collaborate across teams to ensure Zscaler, GCP, and Palo Alto solutions integrate smoothly within our tech ecosystem. You deliver high-quality security products on schedule while mentoring the Network team and providing expert guidance. This role offers a chance to shape enterprise security in a respected global firm. Compensation / Benefits * Develop and maintain technology architecture roadmaps; align with standards * Assess and improve current network security architecture; plan integrations (Zscaler, GCP, Palo Alto) * Provide guidance to ensure product development adheres to processes, performance and budget targets * Offer last-tier support for operations, conduct root cause and preventative analyses * Design system configurations and enforce standards; direct system installation * Train and mentor Network team; support cross-functional collaboration * Uphold professional integrity and a respectful work environment Tasks * 5+ years of experience with Web proxy products (Zscaler, Palo Alto Prisma, etc.) and cloud environments (Azure, GCP) * Deep expertise with Palo Alto firewalls (Strata, VM-Series), Panorama, Prisma Access/ZIA/ZPA * Hands-on GCP engineering focus: VPC design, Cloud Armor; integrate security appliances in cloud-native environments * Proven experience with Zscaler platform engineering (ZIA and ZPA) * Strong background in Network Automation and IaC (Terraform, Ansible) * Excellent communication and leadership abilities; able to manage multiple projects and lead teams * Authorized to work in the U.S. without sponsorship now or in the future Key requirements * comprehensive benefits package * medical and dental plans * vision coverage * disability and life insurance * 401(k) with plan options * Well-being benefits ## Related Videos - [Embracing the Hybrid Cloud: Unlocking Success with Ansible](https://www.wearedevelopers.com/videos/932-embracing-the-hybrid-cloud-unlocking-success-with-ansible) - [Dev & Test in the Cloud? Deploy your cloud environments with Ansible & Terraform](https://www.wearedevelopers.com/videos/1607-dev-test-in-the-cloud-deploy-your-cloud-environments-with-ansible-terraform) - [Exploring the Power of gRPC-Gateway for Writing RESTful Services](https://www.wearedevelopers.com/videos/2072-exploring-the-power-of-grpc-gateway-for-writing-restful-services) - [Infrastructure as Code: The Developer's Secret Weapon](https://www.wearedevelopers.com/videos/1221-infrastructure-as-code-the-developer-s-secret-weapon) - [Enabling automated 1-click customer deployments with built-in quality and security](https://www.wearedevelopers.com/videos/83-enabling-automated-1-click-customer-deployments-with-built-in-quality-and-security) - [Terraform for Developers](https://www.wearedevelopers.com/videos/3-terraform-for-developers) ## Related Articles - [Highest Paying Tech Companies for Developers](https://www.wearedevelopers.com/magazine/220-highest-paying-tech-companies-for-developers) - [Fully Remote Software Engineer Jobs](https://www.wearedevelopers.com/magazine/447-fully-remote-software-engineer-jobs) - [What Are The Top Skills Required For Azure Developers?](https://www.wearedevelopers.com/magazine/77-what-are-the-top-skills-required-for-azure-developers) - [Everything a Developer Needs to Know About MCP with Neo4j](https://www.wearedevelopers.com/magazine/604-everything-a-developer-needs-to-know-about-mcp-with-neo4j) - [Events like RSAC Get You CISOs. Developers Decide What Actually Gets Deployed.](https://www.wearedevelopers.com/magazine/693-events-like-rsac-get-you-cisos-developers-decide-what-actually-gets-deployed) - [Why Upskilling And Reskilling is Important For Developers](https://www.wearedevelopers.com/magazine/428-why-upskilling-and-reskilling-is-important-for-developers)