Lead Engineer, Network Security Platform

Responsibilities

• Aid in developing technology architecture product roadmaps and maintain existing roadmaps.
• Evaluate the current network security architecture and develop action plans to improve it according to industry best practices and standards.
• Provide input on the overall technology plan for the organization, ensuring that specific technologies (Zscaler, GCP, Palo Alto) integrate effectively with other aspects of the technical infrastructure and ecosystem.
• Maintain deep technical and business knowledge of current industry directions and trends.
• Deliver technology and products in the roadmap on schedule and with the highest quality.
• Offer advice, guidance, and direction to carry out plans and procedures.
• Ensure product development process adherence, performance, and budget targets are met.
• Provide last-tier support for operations and support teams, including root cause analysis and preventative analysis.
• Establish network environments by designing system configuration and direct system installation by defining, documenting, and enforcing system standards.
• Train and guide other members of the Network team.
• Act with integrity, professionalism, and personal responsibility to uphold KPMG's respectful and courteous work environment.

Qualifications

• Minimum five years of recent experience with Web proxy products like ZScaler, Palo Alto Prisma and other competitive vendor products, cloud Environments like Azure, GCP; deep level of expertise with Palo Alto firewalls including physical (Strata) and virtual (VM-Series) form factors, Panorama management, and Prisma Access/SaaS security.
• Bachelor's degree from an accredited college or university is preferred; minimum of a high school diploma or GED is required.
• Hands-on experience in Google Cloud Platform (GCP) engineering, specifically focused on VPC design, Cloud Armor, and integrating security appliances within a cloud-native environment and proven experience in Zscaler platform engineering, including the design, implementation, and management of Zscaler Internet Access (ZIA) and Zscaler Private Access (ZPA) solutions.
• Strong background in network automation and "Infrastructure as Code" (such as Terraform, Ansible) to streamline firewall and proxy deployments.
• Excellent verbal/written communication, with ability to effectively interact with individuals at all levels of responsibility and authority; ability to prioritize, delegate, and foster the development of high-performance teams to lead/support an environment driven by customer service and teamwork; strong trouble-shooting and organizational skills and ability to work on multiple projects simultaneously; ability to participate in resource planning processes based on defined organizational plans.