What you'll own :

- Lead engineering and delivery for SWG, Proxy, SASE, Secure Access, and IPS/IDS across a global enterprise environment.

- Administer and harden Zscaler (ZIA/ZPA) and Palo Alto platforms, including Panorama, Prisma Access, NGFW, and Threat Prevention.

- Design and maintain scalable security policies for internet access, private application access, SSL inspection, traffic steering, and threat prevention.

- Drive high-quality changes through safe rollout planning, validation, rollback readiness, and post-change review.

- Improve platform reliability, policy quality, and user experience through standardization, tuning, and operational improvements.

- Partner with SOC/IR, Network Operations, infrastructure, application teams, and vendors to deliver secure and reliable services.

- Improve logging, telemetry, SIEM integration, and operational visibility while reducing noise and strengthening control effectiveness.

- Track and improve key measures such as policy accuracy, false positives, service reliability, change success, and time to mitigation.

- Lead vendor escalations and hold partners accountable for response quality, root cause depth, and durable resolution.

What youll bring :

- Bachelors degree in a related field and 7+ years of experience, or equivalent practical experience.

- Experience in network security or security engineering roles.

- Strong hands-on experience with SWG, Proxy, SASE, or Secure Access in enterprise environments.

- Strong knowledge of Zscaler ZIA/ZPA and Palo Alto technologies including Panorama, NGFW, Threat Prevention, and Prisma Access.

- Experience with IPS/IDS tuning and false-positive reduction.

- Experience with proxy policy, SSL inspection, traffic steering, secure access, threat prevention, and user access troubleshooting.

- Strong networking and security fundamentals including TCP/IP, TLS, DNS, routing, NAT, certificates, and zero trust.

- Experience in large-scale global environments and ability to serve as an escalation point during major incidents.

- Proven ability to mentor engineers, review work, and communicate effectively across teams.

Its a bonus if you have :

- Familiarity with Terraform, Python, CI/CD, or automation for security platforms.

- Exposure to unix based open source platforms.

- Exposure to WAF technologies (Akamai, Cloudflare, or F5 Distributed Cloud), regulated environments.

- Experience with Prisma Access, cloud NGFW, or hybrid architectures.