Lead Engineer, Network Security Platform

Responsibilities

• Aid in the development of technology architecture product roadmaps and maintain existing roadmaps.
• Evaluate the current network security architecture and develop action plans to improve it according to industry best practices and standards.
• Contribute to the overall technology plan for the organization, ensuring that technologies like Zscaler, GCP, and Palo Alto integrate effectively with other parts of the technical infrastructure and ecosystem.
• Stay updated on current industry directions and trends, and deliver technology and products on time and with high quality.
• Offer advice, guidance, and direction to the Network team, ensuring adherence to the product development process, meeting performance and budget targets, and providing last-tier support for operations and support teams, including root cause analysis and preventative analysis.
• Create and document system configurations, and oversee system installations while enforcing system standards.
• Provide training and guidance to other members of the Network team.
• Act with integrity, professionalism, and personal responsibility to uphold KPMG's respectful and courteous work environment.

Qualifications

• Minimum five years of recent experience with Web proxy products such as ZScaler, Palo Alto Prisma, and other competitive vendor products, and cloud environments like Azure, GCP.
• Deep expertise with Palo Alto firewalls, including physical (Strata) and virtual (VM-Series) form factors, Panorama management, and Prisma Access/SaaS security.
• Bachelor's degree from an accredited college or university preferred; minimum of a high school diploma or GED required.
• Hands-on experience in Google Cloud Platform (GCP) engineering, particularly in VPC design, Cloud Armor, and integrating security appliances within a cloud-native environment.
• Proven experience in Zscaler platform engineering, including the design, implementation, and management of Zscaler Internet Access (ZIA) and Zscaler Private Access (ZPA) solutions.
• Strong background in network automation and "Infrastructure as Code" (such as Terraform, Ansible) to streamline firewall and proxy deployments.
• Excellent verbal and written communication skills, with the ability to interact effectively with individuals at all levels of responsibility and authority.
• Ability to prioritize, delegate, and foster the development of high-performance teams to lead/support an environment driven by customer service and teamwork.
• Strong trouble-shooting and organizational skills, along with the ability to work on multiple projects simultaneously.
• Ability to participate in resource planning processes based on defined organizational plans.