Lead Engineer, Network Security Platform

Responsibilities

• Aid in the development of technology architecture product roadmaps and maintain existing roadmaps.
• Evaluate the current network security architecture and develop action plans to improve it according to industry best practices and standards.
• Contribute to the overall technology plan for the organization, ensuring that technologies like Zscaler, GCP, and Palo Alto integrate effectively with other parts of the technical infrastructure and ecosystem.
• Provide advice, guidance, and direction to ensure the successful delivery of technology and products in the roadmap on schedule and with high quality.
• Maintain deep technical and business knowledge of current industry directions and trends.
• Ensure adherence to the product development process, meet performance and budget targets, and offer support to operations and support teams, including root cause analysis and preventative analysis.
• Create and document system configurations for system installations, and direct system installations while defining and enforcing system standards.
• Offer support to operations and support teams, including root cause analysis and preventative analysis, and provide training and guidance to other members of the Network team.
• Act with integrity, professionalism, and personal responsibility to uphold KPMG's respectful and courteous work environment.

Qualifications

• Minimum five years of recent experience with Web proxy products such as ZScaler, Palo Alto Prisma, and other competitive vendor products, and cloud environments like Azure, GCP.
• Deep expertise with Palo Alto firewalls, including physical (Strata) and virtual (VM-Series) form factors, Panorama management, and Prisma Access/SaaS security.
• Bachelor's degree from an accredited college or university preferred; minimum of a high school diploma or GED required.
• Hands-on experience in Google Cloud Platform (GCP) engineering, particularly in VPC design, Cloud Armor, and integrating security appliances within a cloud-native environment.
• Proven experience in Zscaler platform engineering, including the design, implementation, and management of Zscaler Internet Access (ZIA) and Zscaler Private Access (ZPA) solutions.
• Strong background in network automation and "Infrastructure as Code" (such as Terraform, Ansible) to streamline firewall and proxy deployments.
• Excellent verbal and written communication skills, with the ability to interact effectively with individuals at all levels of responsibility and authority.
• Ability to prioritize, delegate, and foster the development of high-performance teams, leading/supporting an environment driven by customer service and teamwork.
• Strong trouble-shooting and organizational skills, along with the ability to work on multiple projects simultaneously.
• Ability to participate in resource planning processes based on defined organizational plans.