Senior Network Security Engineer

Zayo provides mission-critical bandwidth and communications infrastructure solutions to impactful companies across North America and Europe. The Senior Network Security Engineer will design, implement, optimize, and support enterprise network security environments across on-premises, cloud, and hybrid settings, with a focus on Zscaler, Zero Trust, and cloud security. The role also provides senior technical escalation, troubleshooting, automation, architecture leadership, and mentorship across engineering and operations teams.

Responsibilities:

• Design, implement, and optimize enterprise network security solutions supporting on-premises, cloud, and hybrid environments
• Architect scalable Zero Trust security solutions utilizing technologies including Zscaler, next-generation firewalls, VPNs, secure web gateways, cloud security services, and network segmentation
• Lead evaluations, Proofs of Concept (POCs), and implementation of new security technologies and services
• Develop technology roadmaps, standards, and best practices for enterprise network security
• Collaborate with network, security, infrastructure, and identity teams to ensure secure and resilient architectures
• Serve as the senior technical escalation point for complex network security incidents and production issues
• Troubleshoot advanced networking, DNS, routing, authentication, proxy, SSL/TLS, and application connectivity issues
• Configure, manage, and optimize enterprise security technologies including firewalls, VPNs, secure web gateways, cloud access security solutions, and Zero Trust platforms
• Perform root cause analysis for recurring or high-impact incidents and drive long-term remediation
• Monitor platform health, performance, and user experience using enterprise monitoring and observability tools
• Participate in critical incident response and support a highly available production environment
• Zscaler Administration
• Administer and optimize Zscaler services including ZIA, ZPA, and ZDX
• Configure security policies, SSL inspection, traffic forwarding, PAC files, IPSec/GRE tunnels, and App Connector deployments
• Support Zero Trust access policies, secure application access, and cloud security initiatives
• Collaborate with identity teams to integrate authentication platforms including Microsoft Entra ID (Azure AD), CyberArk, SailPoint, and other enterprise identity providers
• Develop and maintain security standards, configuration management processes, and operational procedures
• Implement automation to improve deployment, monitoring, configuration management, and operational efficiency
• Support compliance initiatives by ensuring network security solutions align with organizational policies and regulatory requirements
• Develop and maintain runbooks, playbooks, technical documentation, and operational standards
• Provide technical leadership and mentorship to engineering and operations teams
• Lead technical discussions across infrastructure, networking, security, identity, and application teams
• Share knowledge through documentation, training, and operational guidance
• Drive continuous improvement initiatives focused on service reliability, operational maturity, and customer experience
• Design and implement scalable network security solutions
• Lead complex troubleshooting and serve as a senior technical escalation resource
• Balance strategic architecture with hands-on engineering
• Collaborate effectively across security, networking, infrastructure, and identity teams
• Continuously improve security operations through automation, process improvement, and technical leadership

Requirements:

• Minimum of seven (7) years of experience in network security, cybersecurity, or infrastructure engineering
• Strong experience designing, implementing, and supporting enterprise network security technologies
• Minimum of three (3) years of hands-on experience with Zscaler technologies, including ZIA, ZPA, and/or ZDX
• Experience administering one or more enterprise firewall platforms such as Palo Alto, Cisco, Fortinet, or Check Point
• Strong understanding of: Network security architecture, Zero Trust principles, Secure Web Gateway technologies, VPN technologies, DNS, Routing and switching fundamentals, SSL/TLS, Identity and authentication
• Experience with cloud security and hybrid network architectures
• Experience troubleshooting complex production issues and serving as a senior escalation resource
• Familiarity with enterprise identity providers such as Microsoft Entra ID (Azure AD), SailPoint, or CyberArk
• Excellent analytical, troubleshooting, documentation, and communication skills
• Zscaler certifications (ZCP, ZDTA, ZDTE, ZDXA)
• CISSP, CISM, Security+, Network+, GIAC, CCNP Security, PCNSE, or equivalent certifications
• Experience with scripting and automation using Python, PowerShell, or Shell
• Experience with CI/CD, Infrastructure as Code, and configuration management tools
• Familiarity with compliance frameworks such as PCI-DSS, SOX, HIPAA, or NIST
• Bachelor's degree in Computer Science, Information Technology, Cybersecurity, or a related field (or equivalent experience)