Senior Network Security Engineer

Experteer Overview You will architect, implement, and operate Zayo’s enterprise network security across on-prem, cloud, and hybrid environments. As a technical leader, you balance design excellence with hands-on engineering and L3 support, collaborating with cross-functional teams to deliver scalable Zero Trust and cloud security solutions. You’ll mentor engineers, lead complex incidents, and drive automation and operational maturity. This role sits at the intersection of security, networking, and identity to protect critical infrastructure at scale. Compensation / Benefits * Design, implement, and optimize enterprise network security for on-premises, cloud, and hybrid environments. * Architect scalable Zero Trust solutions using Zscaler, NGFWs, VPNs, secure web gateways, and network segmentation. * Lead evaluations, POCs, and implementation of new security technologies; develop roadmaps and standards. * Collaborate with network, security, infrastructure, and identity teams to ensure secure architectures. * Serve as senior escalation point for complex incidents; troubleshoot advanced networking, DNS, routing, authentication, proxy, SSL/TLS, and app connectivity issues. * Configure and operate firewalls, VPNs, secure web gateways, cloud security solutions, and Zero Trust platforms; perform root cause analysis. * Monitor platform health and participate in critical incident response to maintain high availability. * Administer and optimize Zscaler services (ZIA, ZPA, ZDX); configure policies, SSL inspection, tunnels, and App Connectors. * Support Zero Trust access policies and cloud security initiatives; integrate with identity providers (e.g., Microsoft Entra ID, Azure AD, CyberArk, SailPoint). * Develop/security governance and automation; implement configuration management, runbooks, and documentation; ensure regulatory alignment. * Provide technical leadership, mentor teams, and drive continuous improvement in service reliability and customer experience. Tasks * 7+ years in network security, cybersecurity, or infrastructure engineering. * 3+ years hands-on with Zscaler (ZIA, ZPA, and/or ZDX). * Experience administering firewall platforms (Palo Alto, Cisco, Fortinet, or Check Point). * Strong knowledge of network security architecture, Zero Trust, Secure Web Gateway, VPN, DNS, routing, SSL/TLS, and identity/authentication. * Experience with cloud security and hybrid networks; strong incident troubleshooting skills. * Familiarity with identity providers such as Microsoft Entra ID (Azure AD), SailPoint, or CyberArk. * Excellent analytical, troubleshooting, documentation, and communication skills. Key requirements * Excellent Health, Dental & Vision Insurance * Retirement 401(k) Savings Plan * Generous paid time off policy including paid parental leave

Trust architectures. * Serve as senior escalation point for complex incidents; troubleshoot advanced networking, DNS, routing, authentication, proxy, SSL/TLS, and app connectivity issues. * Configure and operate firewalls, VPNs, secure web gateways, cloud security solutions, and Zero Trust platforms; perform root cause analysis. * Monitor platform health and participate in critical incident response to maintain high availability. * Administer and optimize Zscaler services (ZIA, ZPA, ZDX); configure policies, SSL inspection, tunnels, and App Connectors. * Support Zero Trust access policies and cloud security initiatives; integrate with identity providers (e.g., Microsoft Entra ID, Azure AD, CyberArk, SailPoint). * Develop/security governance and automation; implement configuration management, runbooks, and documentation; ensure regulatory alignment. * Provide technical leadership, mentor teams, and drive continuous improvement in service reliability and customer experience. Tasks * 7+ years D _ network security, cybersecurity, or infrastructure engineering. * 3+ years hands-on with Zscaler (ZIA, ZPA, and/or ZDX). * Experience administering firewall platforms (Palo Alto, Cisco, Fortinet, or Check Point). * Strong knowledge of network security architecture, Zero Trust, Secure Web Gateway, VPN, DNS, routing, SSL/TLS, and identity/authentication. * Experience with cloud security and hybrid networks; strong incident troubleshooting skills. * Familiarity with identity providers such as Microsoft Entra ID (Azure AD), SailPoint, or CyberArk. * Excellent analytical, troubleshooting, documentation, and communication skills. Key requirements * Excellent Health, Dental & Vision Insurance * Retirement 401(k) Savings Plan * Generous paid time off policy including paid parental leave