Apply on Employer Site

Sev1Tech LLC · 1 day ago

Security Engineer - Zscaler

US-VA-Arlington

Full-time

Onsite

Senior Level

5+ years exp

Sev1Tech LLC is a leading provider of IT modernization, engineering, and program management solutions. They are seeking a Security Engineer to provide Zscaler Engineering support, focusing on implementing Zscaler solutions to manage connections between users and cloud environments while ensuring IT Security Governance policies are applied.

ConsultingCyber SecurityInformation TechnologyInfrastructureSecurity

Growth Opportunities

No H1B

Security Clearance Required

U.S. Citizen Only

Responsibilities

The Zscaler Engineer is responsible for the engineering, design, test, and implementation of ZScaler internet (TIC) and private access (VPN replacement) solution

Support of the development of the Technical Requirements Document and a Detailed Design Document (DDD) for the network architecture, consistent with the associated Functional Requirements Document and DDD, before transitioning to Operations

Development and maintenance of monitoring processes and procedures supporting a 24/7/365 Network Operations Center (NOC)

Support of all updates to all documents when there is change in the network design and/or technologies and collaborating with all stakeholders to test all related systems and application migration processes to verify that the systems meet requirements and can host applications with no degradation to performance or security

Preparation of test reports and Implementation Plans for each change impacting the network environment

Implements the ZScaler solution across an enterprise

Implements Data Loss Prevention (DLP) practices and policies

Managing user access controls in cloud environments

Serves as a Subject Matter Expert in the advanced CASB, DLP, API, SD-WAN, and location implementation and best practices around those implementations

Provides internal consulting, technical guidance, information and support to application developers, computer operations, company management and departmental clients. Assists in internal training programs

Must be able to work with minimal supervision and possess excellent written and verbal communication skills

Qualification

Zscaler EngineeringNetwork DesignCloud EngineeringData Loss PreventionUser Access ControlsServiceNowCloud Identity ManagementTechnical DocumentationCommunication Skills

Required

Bachelors AND 5 years' experience OR 9 years' experience in lieu of a degree

Requires hands-on experience in Network Design, Network Engineering, Network Operational Support, and cloud engineering experience of Medium to Large enterprise network environments

Experience implementing the ZScaler CASB solution in an enterprise

Experience with Zscaler or related Data Loss Prevention (DLP) practices and policies

Experience with managing user access controls in cloud environments

Experience with ServiceNow, Jira, VMware vCenter, cloud computing concepts

Experience with cloud reporting with preparation for both internal and executive stakeholders

Experience migrating from legacy on-prem networking to the cloud networking

Experience with traditional on-premises proxies

Experience with cloud-based proxy concepts

Experience with Cloud Identity and Access Management

Experience deploying and managing virtual servers on premise and in the cloud

Experience with concepts and operations of cloud-based on physical load balancers

Experience with implementing and exporting audit trails

Experience with cloud-based monitoring solutions

Must be eligible to obtain a Department of Homeland Security EOD clearance (Requirements 1. US Citizenship, 2. Favorable Background Investigation)

Must be able to work with minimal supervision and possess excellent written and verbal communication skills

Preferred

DHS EOD - 1st priority

Any DHS badge + DoD Top Secret or Secret - 2nd choice

DoD Secret or Top Secret + willingness to get EOD clearance - 3rd choice (it can take 45 days to obtain EOD clearance – work can only begin once the clearance is fully adjudicated)