[Hiring] Senior Network Security Engineer @Zayo Group

Role Description

We are seeking a highly experienced Senior Network Security Architect to serve as a technical leader responsible for the design, implementation, optimization, and operational support of our enterprise network security environment. This role combines hands-on engineering, solution architecture, and Level 3 operational support responsibilities across multiple network security technologies, with a strong emphasis on Zscaler, Zero Trust, and cloud security.

The ideal candidate is an experienced network security professional who can balance strategic architecture with day-to-day operational leadership. You will partner closely with Network, Security, Identity, Infrastructure, and Application teams to deliver scalable, secure, and highly available solutions while mentoring engineers, leading complex troubleshooting efforts, and driving operational excellence.

Key Responsibilities

• Network Security Architecture
  • Design, implement, and optimize enterprise network security solutions supporting on-premises, cloud, and hybrid environments.
  • Architect scalable Zero Trust security solutions utilizing technologies including Zscaler, next-generation firewalls, VPNs, secure web gateways, cloud security services, and network segmentation.
  • Lead evaluations, Proofs of Concept (POCs), and implementation of new security technologies and services.
  • Develop technology roadmaps, standards, and best practices for enterprise network security.
  • Collaborate with network, security, infrastructure, and identity teams to ensure secure and resilient architectures.
• Engineering & Operations
  • Serve as the senior technical escalation point for complex network security incidents and production issues.
  • Troubleshoot advanced networking, DNS, routing, authentication, proxy, SSL/TLS, and application connectivity issues.
  • Configure, manage, and optimize enterprise security technologies including firewalls, VPNs, secure web gateways, cloud access security solutions, and Zero Trust platforms.
  • Perform root cause analysis for recurring or high-impact incidents and drive long-term remediation.
  • Monitor platform health, performance, and user experience using enterprise monitoring and observability tools.
  • Participate in critical incident response and support a highly available production environment.
• Zscaler Administration
  • Administer and optimize Zscaler services including ZIA, ZPA, and ZDX.
  • Configure security policies, SSL inspection, traffic forwarding, PAC files, IPSec/GRE tunnels, and App Connector deployments.
  • Support Zero Trust access policies, secure application access, and cloud security initiatives.
  • Collaborate with identity teams to integrate authentication platforms including Microsoft Entra ID (Azure AD), CyberArk, SailPoint, and other enterprise identity providers.
• Security Governance & Automation
  • Develop and maintain security standards, configuration management processes, and operational procedures.
  • Implement automation to improve deployment, monitoring, configuration management, and operational efficiency.
  • Support compliance initiatives by ensuring network security solutions align with organizational policies and regulatory requirements.
  • Develop and maintain runbooks, playbooks, technical documentation, and operational standards.
• Leadership & Collaboration
  • Provide technical leadership and mentorship to engineering and operations teams.
  • Lead technical discussions across infrastructure, networking, security, identity, and application teams.
  • Share knowledge through documentation, training, and operational guidance.
  • Drive continuous improvement initiatives focused on service reliability, operational maturity, and customer experience.

Qualifications

• Minimum of seven (7) years of experience in network security, cybersecurity, or infrastructure engineering.
• Strong experience designing, implementing, and supporting enterprise network security technologies.
• Minimum of three (3) years of hands-on experience with Zscaler technologies, including ZIA, ZPA, and/or ZDX.
• Experience administering one or more enterprise firewall platforms such as Palo Alto, Cisco, Fortinet, or Check Point.
• Strong understanding of:
  • Network security architecture
  • Zero Trust principles
  • Secure Web Gateway technologies
  • VPN technologies
  • DNS
  • Routing and switching fundamentals
  • SSL/TLS
  • Identity and authentication
  • Experience with cloud security and hybrid network architectures.
• Experience troubleshooting complex production issues and serving as a senior escalation resource.
• Familiarity with enterprise identity providers such as Microsoft Entra ID (Azure AD), SailPoint, or CyberArk.
• Excellent analytical, troubleshooting, documentation, and communication skills.

Preferred Qualifications

• Zscaler certifications (ZCP, ZDTA, ZDTE, ZDXA).
• CISSP, CISM, Security+, Network+, GIAC, CCNP Security, PCNSE, or equivalent certifications.
• Experience with scripting and automation using Python, PowerShell, or Shell.
• Experience with CI/CD, Infrastructure as Code, and configuration management tools.
• Familiarity with compliance frameworks such as PCI-DSS, SOX, HIPAA, or NIST.
• Bachelor's degree in Computer Science, Information Technology, Cybersecurity, or a related field (or equivalent experience).

Benefits

• Excellent Health, Dental & Vision Insurance
• Retirement 401(k) Savings Plan
• Generous paid time off policy including paid parental leave

Work Authorization Requirement

Applicants must be currently authorized to work in the United States on a full-time basis, and this position is not eligible for employer-sponsored work authorization, such as OPT, TN, H1B, or any other type of work visa, now or in the future.