Lead Engineer, Network Security Platform

Responsibilities

• Aid in the development of technology architecture product roadmaps and maintain existing roadmaps.
• Evaluate the current network security architecture and develop action plans to improve it according to industry best practices and standards.
• Contribute to the overall technology plan for the organization, ensuring that technologies like Zscaler, GCP, and Palo Alto integrate effectively with other parts of the technical infrastructure and ecosystem.
• Stay updated on current industry directions and trends; deliver technology and products on schedule and with high quality.
• Offer advice, guidance, and direction to carry out plans and procedures; ensure adherence to product development process, performance, and budget targets; provide last-tier support for operations and support teams, including root cause analysis and preventative analysis; establish network environments by designing system configuration and directing system installations.
• Support the Network team by offering last-tier support for operations and support teams, including root cause analysis and preventative analysis; provide training and guidance to other members of the Network team.

Qualifications

• Minimum five years of recent experience with Web proxy products like ZScaler, Palo Alto Prisma, and other competitive vendor products, cloud environments like Azure, GCP; deep expertise with Palo Alto firewalls including physical (Strata) and virtual (VM-Series) form factors, Panorama management, and Prisma Access/SaaS security.
• Bachelor's degree from an accredited college or university is preferred; minimum of a high school diploma or GED is required.
• Hands-on experience in Google Cloud Platform (GCP) engineering, specifically focused on VPC design, Cloud Armor, and integrating security appliances within a cloud-native environment; proven experience in Zscaler platform engineering, including the design, implementation, and management of Zscaler Internet Access (ZIA) and Zscaler Private Access (ZPA) solutions.
• Strong background in network automation and "Infrastructure as Code" (such as Terraform, Ansible) to streamline firewall and proxy deployments.
• Excellent verbal/written communication skills, with the ability to interact with individuals at all levels of responsibility and authority; ability to prioritize, delegate, and foster the development of high-performance teams; strong trouble-shooting and organizational skills; ability to work on multiple projects simultaneously; ability to participate in resource planning processes based on defined organizational plans.

Benefits

KPMG offers a comprehensive compensation and benefits package, including a variety of medical and dental plans, vision coverage, disability and life insurance, 401(k) plans, and a robust suite of personal well-being benefits to support your mental health. Depending on job classification, standard work hours, and years of service, KPMG provides Personal Time Off per fiscal year. Additionally, each year KPMG publishes a calendar of holidays to be observed during the year and provides eligible employees two breaks each year where employees will not be required to use Personal Time Off; one is at year end and the other is around the July 4th holiday. For more information about our benefits, visit our KPMG US Careers site.