Lead Engineer, Network Security Platform

Responsibilities

• Aid in developing technology architecture product roadmaps and maintaining existing roadmaps.
• Evaluate the current network security architecture and develop action plans to improve it according to industry best practices and standards.
• Provide input on the overall technology plan for the organization, ensuring that technologies like Zscaler, GCP, and Palo Alto integrate effectively with other parts of the technical infrastructure and ecosystem.
• Maintain deep technical and business knowledge of current industry directions and trends.
• Deliver technology and products in the roadmap on schedule and with the highest quality.
• Offer advice, guidance, and direction to carry out plans and procedures.
• Ensure product development process adherence, performance, and budget targets are met.
• Provide last-tier support for operations and support teams, including root cause analysis and preventative analysis.
• Establish network environments by designing system configuration and direct system installation by defining, documenting, and enforcing system standards.
• Train and guide other members of the Network team.
• Act with integrity, professionalism, and personal responsibility to uphold KPMG's respectful and courteous work environment.

Qualifications

• Minimum five years of recent experience with Web proxy products like ZScaler, Palo Alto Prisma, and other competitive vendor products, cloud environments like Azure and GCP; deep expertise with Palo Alto firewalls including physical (Strata) and virtual (VM-Series) form factors, Panorama management, and Prisma Access/SaaS security.
• A Bachelor's degree from an accredited college or university is preferred; a minimum of a high school diploma or GED is required.
• Hands-on experience in Google Cloud Platform (GCP) engineering, particularly focused on VPC design, Cloud Armor, and integrating security appliances within a cloud-native environment, and proven experience in Zscaler platform engineering, including the design, implementation, and management of Zscaler Internet Access (ZIA) and Zscaler Private Access (ZPA) solutions.
• Strong background in network automation and "Infrastructure as Code" (such as Terraform, Ansible) to streamline firewall and proxy deployments.
• Excellent verbal and written communication skills, with the ability to interact effectively with individuals at all levels of responsibility and authority.
• Ability to prioritize, delegate, and foster the development of high-performance teams to lead/support an environment driven by customer service and teamwork.
• Strong trouble-shooting and organizational skills, along with the ability to work on multiple projects simultaneously.
• Ability to participate in resource planning processes based on defined organizational plans.