[Hiring] SENIOR NETWORK SECURITY ENGINEER @Compass Group

Role Description

The Network Services team is responsible for building, supporting, and optimizing the Compass North American network in all on-premises and cloud environments. The Sr. Network Security Engineer is responsible for the design, deployment, and support of the organization’s secure network access and zero trust architecture across cloud and on-premises environments.

• Lead the design, deployment, and operations of the organization’s zero trust architecture.
• Primary ownership of the Zscaler suite (ZIA, ZPA, and ZTNA) across on-premises and AWS cloud environments.
• Partner with Cyber Security and Cloud teams to expand the ZPA footprint and advance zero trust access for private applications.
• Initial focus on evaluating Zscaler’s Zero Trust Exchange for modernizing private application connectivity in AWS.

Job Responsibilities

• Provide inter-team / inter-technology research, collaboration, design, troubleshooting, and response supporting Compass on-prem and cloud environments.
• Lead platform optimization and long-term issue resolution efforts.
• Perform backup and restore testing/validation weekly/monthly/quarterly.
• Provide tier 3 support for incidents related to any technology owned and supported by the Network Services group.
• Serve as subject matter expert for the Zscaler Zero Trust Exchange — ZIA, ZPA, Zscaler Client Connector (ZCC), and ZDX.
• Deploy, validate, and maintain ZPA App Connectors across AWS, on-premises, and branch environments.
• Design and fine-tune granular access policies, including application segmentation, URL filtering, SSL/TLS inspection, cloud firewall, sandboxing, and data loss prevention (DLP).
• Configure and maintain forwarding profiles, SSL inspection, and secure web gateway controls.
• Lead a proof of concept evaluating Zscaler’s Zero Trust Exchange for private application access in AWS.
• Monitor tenant health, security events, and digital experience using ZDX.
• Integrate Zscaler with identity providers (Microsoft Entra ID) using SAML and OIDC.
• Participate in incident, problem, and change management within CAB-controlled processes.

Qualifications

• 5+ years of experience in network security, cybersecurity engineering, or network engineering with a strong security emphasis.
• Hands-on experience administering Zscaler ZIA and ZPA at scale.
• Practical understanding of Zero Trust Network Access (ZTNA) principles.
• Working knowledge of AWS cloud networking.
• Strong familiarity with identity and SSO technologies.
• Solid foundation in core networking: TCP/IP, DNS, DHCP, routing, and SSL/TLS certificates.
• Comfortable reading logs, packet captures, and HAR files.
• Highly knowledgeable of security concepts and protocols.
• Knowledgeable of cloud and hybrid cloud networks.
• Bachelor’s degree in computer science, or a combination of education and experience.
• Excellent verbal and written communication skills.
• Excellent critical thinking and problem-solving skills.
• Positive attitude and solutions-oriented thinking.
• Ability to communicate technical concepts to both technical and non-technical audiences.

Preferred

• AWS WAF and AWS Firewall Manager experience.
• Aviatrix experience.
• Scripting and automation with PowerShell, Python, or Terraform.
• AWS or equivalent cloud certification.
• Zscaler certification such as ZIA Certified Administrator, ZPA Professional.
• AWS Advanced Networking Specialty certification.
• Security certification such as CompTIA Security+ or SANS/GIAC.
• ITIL v3 Foundation’s desirable.

Benefits

• Medical
• Dental
• Vision
• Life Insurance/ AD
• Disability Insurance
• Retirement Plan
• Paid Time Off
• Holiday Time Off (varies by site/state)
• Associate Shopping Program
• Health and Wellness Programs
• Discount Marketplace
• Identity Theft Protection
• Pet Insurance
• Commuter Benefits
• Employee Assistance Program
• Flexible Spending Accounts (FSAs)
• Paid Parental Leave
• Personal Leave