Lead Engineer, Network Security Platform

Responsibilities

• Aid in the development of technology architecture product roadmaps and maintain existing roadmaps.
• Evaluate the current network security architecture and develop action plans to improve it according to industry best practices and standards.
• Contribute to the overall technology plan for the organization, ensuring that technologies like Zscaler, GCP, and Palo Alto integrate effectively with other parts of the technical infrastructure and ecosystem.
• Stay updated on current industry directions and trends; ensure that technology and products in the roadmap are delivered on time and of high quality.
• Provide advice, guidance, and direction to carry out plans and procedures; ensure adherence to product development process, performance, and budget targets; offer support for operations and support teams, including root cause analysis and preventative analysis.
• Create and document system configurations for network environments; oversee system installations, defining and enforcing system standards.
• Offer support for operations and support teams, including root cause analysis and preventative analysis; provide training and guidance to other members of the Network team.
• Operate with integrity, professionalism, and personal responsibility to maintain KPMG's respectful and courteous work environment.

Qualifications

• Minimum five years of recent experience with Web proxy products like ZScaler, Palo Alto Prisma, and other competitive vendor products, cloud environments like Azure and GCP; deep expertise with Palo Alto firewalls, including physical (Strata) and virtual (VM-Series) form factors, Panorama management, and Prisma Access/SaaS security.
• Bachelor's degree from an accredited college or university is preferred; minimum of a high school diploma or GED is required.
• Hands-on experience in Google Cloud Platform (GCP) engineering, focusing on VPC design, Cloud Armor, and integrating security appliances within a cloud-native environment; proven experience in Zscaler platform engineering, including the design, implementation, and management of Zscaler Internet Access (ZIA) and Zscaler Private Access (ZPA) solutions.
• Strong background in network automation and "Infrastructure as Code" (such as Terraform, Ansible) to streamline firewall and proxy deployments.
• Excellent verbal and written communication skills, with the ability to interact with individuals at all levels of responsibility and authority; ability to prioritize, delegate, and foster the development of high-performance teams; strong trouble-shooting and organizational skills; ability to work on multiple projects simultaneously; ability to participate in resource planning processes based on defined organizational plans.
• Eligible to work in the U.S. without the need for employment-based visa sponsorship now or in the future; KPMG LLP will not sponsor applicants for U.S. work visa status for this opportunity.

Benefits

KPMG offers a comprehensive compensation and benefits package, including:

• Medical and dental plans
• Vision coverage
• Disability and life insurance
• 401(k) plans
• A robust suite of personal well-being benefits to support mental health
• Personal Time Off per fiscal year
• Calendar of holidays to be observed during the year

Additional details about our benefits can be found on our KPMG US Careers site. No phone calls or agencies please. KPMG recruits on a rolling basis. Candidates are considered as they apply, until the opportunity is filled. Candidates are encouraged to apply expeditiously to any role(s) for which they are qualified that is also of interest to them.