Network Security Engineer

McGough Construction CO, LLC is hiring a Network Security Engineer to design, implement, and operate its Zscaler environment and related network security controls. The role applies zero-trust, secure access, traffic inspection, and data protection across enterprise users, applications, and workloads, in partnership with cross-functional technology teams.

Responsibilities:

• Design, implement, administer, and troubleshoot ZIA, ZPA, Client Connector, App Connectors, traffic forwarding, TLS inspection, secure web gateway, firewall, threat protection, CASB, and DLP controls
• Secure employee access to internet, SaaS, and private applications using identity-, device-, risk-, and data-aware policies
• Design secure connectivity and segmentation for on-premises and cloud workloads, private applications, administrative services, and machine-to-machine communications
• Integrate Zscaler with identity, endpoint, cloud, certificate, SIEM, and incident-response platforms
• Develop and maintain the target architecture and roadmap for Zscaler, zero-trust networking, secure access, and cloud workload protection
• Partner with business and technical stakeholders to assess user and application access, traffic and data flows, availability needs, performance, and security requirements
• Develop, test, document, and maintain access, data-protection, traffic-inspection, segmentation, and exception policies
• Govern internet, SaaS, and private-application access and protect source code, credentials, intellectual property, customer information, and other sensitive data
• Monitor Zscaler logs and develop alerts for threats, sensitive-data exposure, policy bypass, anomalous traffic, and administrative changes
• Report on platform health, traffic trends, policy effectiveness, exceptions, incidents, and remediation progress
• Automate configuration, validation, reporting, and compliance activities using APIs, scripting, or infrastructure-as-code tools
• Maintain architecture diagrams, operational procedures, troubleshooting guides, and incident-response runbooks

Requirements:

• 2+ years of network, cloud, or security engineering experience, including significant production experience with Zscaler ZIA, ZPA, and Client Connector
• Strong knowledge of TCP/IP, routing, DNS, HTTP/S, TLS, certificates, proxies, GRE, IPsec, identity federation, device posture, CASB, and DLP
• Experience designing secure internet, SaaS, private-application, and cloud-workload connectivity in at least one major public-cloud platform
• Experience integrating network security platforms with identity, endpoint, certificate, SIEM, and incident-response systems
• Advanced troubleshooting of routing, authentication, certificates, proxies, application connectivity, traffic forwarding, and performance issues
• Ability to translate security and connectivity requirements into practical, identity- and risk-based policies
• Strong documentation, project ownership, communication, and cross-functional collaboration skills
• Ability to balance security, user experience, application performance, and business needs
• Experience with Zscaler Cloud Connector, Zero Trust Gateway, ZDX, Browser Isolation, Cloud NSS, or related Zscaler capabilities
• Experience with Terraform, Python, PowerShell, REST APIs, Git, or CI/CD automation
• Zscaler, cloud, networking, or security certifications