[Hiring] Senior Network Security Engineer @Metric Systems LLC

Role Description

My client is seeking a Fully Remote Sr. Network Security Engineer SME to lead a high-impact Zero Trust transformation for the FBI CJIS division, driving the shift from legacy network security to a modern, cloud-first architecture powered by Zscaler. This role blends hands-on engineering with architectural influence, contributing directly to TIC 3.0-aligned modernization efforts within a mature SAFe Agile environment. You'll work alongside a collaborative mix of federal and contractor engineers, shaping future-state security capabilities, solving complex enterprise-scale challenges, and gaining deeply marketable expertise in Zscaler (ZIA/ZPA), Zero Trust, SASE frameworks, cloud security, and identity-driven access. Candidates with Zscaler experience or comparable cloud security/SWG/ZTNA platforms are strongly preferred.

• Participate in SAFe Agile ceremonies (daily stand-ups, sprint planning, retrospectives) and deliver work within sprint cycles
• Lead the implementation of Zscaler ZIA and ZPA to support Zero Trust and cloud-delivered security objectives
• Develop and execute migration strategies to transition from legacy forward proxies and VPNs to Zscaler-based architectures
• Design direct-to-cloud connectivity solutions that eliminate on-premises traffic backhaul
• Configure and optimize Zscaler policies (URL filtering, SSL inspection, DLP, access controls) to meet security requirements
• Integrate Zscaler with enterprise identity providers (e.g., Active Directory, Azure AD) to enforce identity-based access
• Collaborate with cross-functional teams (network, security, cloud) to support Zero Trust and TIC 3.0-aligned architectures
• Manage and resolve complex network security issues, including traffic flow, access, and policy enforcement troubleshooting
• Support Operations & Maintenance (O&M) activities such as service ticket resolution, vulnerability remediation, and system sustainment
• Develop and maintain technical documentation, including architecture diagrams, implementation plans, and operational procedures

Qualifications

• Hands-on experience with Zscaler (ZIA/ZPA) or comparable cloud security / SWG / ZTNA platforms strongly preferred
• 12+ years of network security or cybersecurity engineering experience required
• Education: A degree may substitute for a portion of the required experience
• Proven experience as a technical lead / SME on enterprise network or security projects
• Experience supporting large-scale network security migrations (e.g., proxy/VPN to cloud-based or Zero Trust architectures)
• Experience supporting Zero Trust architecture or modern secure access solutions
• Experience integrating with identity providers (Active Directory, Azure AD, SAML/OIDC)
• Strong background in enterprise networking and security, including firewalls (Palo Alto, Cisco, etc.), routing, DNS, and proxy architectures
• Experience with SIEM/logging platforms (Splunk preferred)
• Experience troubleshooting complex network and security issues in enterprise environments
• Day Shift 8am - 5pm
• Willingness to travel to Clarksburg, WV when required
• US citizenship Required
• Top Secret clearance required
• Zscaler certifications (e.g., ZDTA, ZDTE, ZCCA-IA, ZCCA-PA)

Desired Qualifications

• Experience leading or supporting a Zscaler ZIA/ZPA enterprise deployment
• Familiarity with CISA TIC 3.0 and federal network security modernization initiatives
• Experience replacing on-prem forward proxies and/or VPNs with cloud-delivered security solutions
• Knowledge of Zero Trust architecture (ZTA) and SASE frameworks
• Experience designing or implementing direct-to-cloud access architectures (avoiding traditional network backhaul)
• Cloud experience with AWS and/or Azure, including networking and security integration
• Security certifications (e.g., Security+, CASP/X, CISSP)
• Cisco certifications (e.g., CCNA, CCNP)
• Experience working in a SAFe Agile environment using Jira and Confluence