Lead Engineer, Network Security Platform

Responsibilities

• Aid in the development of technology architecture product roadmaps and maintain existing roadmaps.
• Evaluate the current network security architecture and develop action plans to improve it according to industry best practices and standards.
• Contribute to the overall technology plan for the organization, ensuring that technologies like Zscaler, GCP, and Palo Alto integrate effectively with other parts of the technical infrastructure and ecosystem.
• Deliver technology and products in the roadmap on time and of high quality.
• Offer advice, guidance, and direction to carry out plans and procedures; ensure adherence to product development process, performance, and budget targets; provide last-tier support for operations and support teams, including root cause analysis and preventative analysis; establish network environments by designing system configuration and directing system installation by defining, documenting, and enforcing system standards.
• Support operations and support teams by offering last-tier support, including root cause analysis and preventative analysis; provide training and guidance to other members of the Network team.
• Act with integrity, professionalism, and personal responsibility to uphold KPMG's respectful and courteous work environment.

Qualifications

• Minimum five years of recent experience with Web proxy products like ZScaler, Palo Alto Prisma, and other competitive vendor products, cloud environments like Azure and GCP; deep expertise with Palo Alto firewalls including physical (Strata) and virtual (VM-Series) form factors, Panorama management, and Prisma Access/SaaS security.
• Bachelor's degree from an accredited college or university is preferred; minimum of a high school diploma or GED is required.
• Hands-on experience in Google Cloud Platform (GCP) engineering, specifically focused on VPC design, Cloud Armor, and integrating security appliances within a cloud-native environment; proven experience in Zscaler platform engineering, including the design, implementation, and management of Zscaler Internet Access (ZIA) and Zscaler Private Access (ZPA) solutions.
• Strong background in network automation and "Infrastructure as Code" (such as Terraform, Ansible) to streamline firewall and proxy deployments.
• Excellent verbal/written communication skills, with the ability to effectively interact with individuals at all levels of responsibility and authority; ability to prioritize, delegate, and foster the development of high-performance teams; strong trouble-shooting and organizational skills; ability to work on multiple projects simultaneously; ability to participate in resource planning processes based on defined organizational plans.
• Applicants must be authorized to work in the U.S. without the need for employment-based visa sponsorship now or in the future; KPMG LLP will not sponsor applicants for U.S. work visa status for this opportunity (no sponsorship is available for H-1B, L-1, TN, O-1, E-3, H-1B1, F-1, J-1, OPT, CPT or any other employment-based visa).