Lead Engineer, Network Security Platform

Responsibilities

• Aid in developing technology architecture product roadmaps and maintaining existing roadmaps.
• Evaluate the current network security architecture and develop action plans to improve it in alignment with industry best practices and standards.
• Contribute to the overall technology plan for the organization, ensuring that technologies like Zscaler, GCP, and Palo Alto integrate seamlessly with other parts of the technical infrastructure and ecosystem.
• Stay updated on current industry directions and trends, and ensure that technology and products in the roadmap are delivered on time and of high quality.
• Provide advice, guidance, and direction to the Network team, ensuring adherence to the product development process, meeting performance and budget targets, and offering support to operations and support teams, including root cause analysis and preventative analysis.
• Establish network environments by designing system configurations and directing system installations, while defining, documenting, and enforcing system standards.
• Offer last-tier support for operations and support teams, including root cause analysis and preventative analysis.
• Train and guide other members of the Network team.
• Act with integrity, professionalism, and personal responsibility to uphold KPMG's respectful and courteous work environment.

Qualifications

• Minimum five years of recent experience with Web proxy products such as ZScaler, Palo Alto Prisma, and other competitive vendor products, and cloud environments like Azure and GCP.
• Deep expertise with Palo Alto firewalls, including physical (Strata) and virtual (VM-Series) form factors, Panorama management, and Prisma Access/SaaS security.
• Bachelor's degree from an accredited college or university preferred; minimum of a high school diploma or GED required.
• Hands-on experience in Google Cloud Platform (GCP) engineering, particularly in VPC design, Cloud Armor, and integrating security appliances within a cloud-native environment.
• Proven experience in Zscaler platform engineering, including the design, implementation, and management of Zscaler Internet Access (ZIA) and Zscaler Private Access (ZPA) solutions.
• Strong background in network automation and "Infrastructure as Code" (such as Terraform, Ansible) to streamline firewall and proxy deployments.
• Excellent verbal and written communication skills, with the ability to interact effectively with individuals at all levels of responsibility and authority.
• Ability to prioritize, delegate, and foster the development of high-performance teams, leading an environment driven by customer service and teamwork.
• Strong trouble-shooting and organizational skills, along with the ability to work on multiple projects simultaneously.
• Ability to participate in resource planning processes based on defined organizational plans.