Lead Engineer, Network Security Platform
KPMG US · Rochester, NY · 1 mo ago
HybridInformation TechnologyFull-time
Responsibilities
- Aid in developing technology architecture product roadmaps and maintain existing roadmaps.
- Evaluate the current network security architecture and develop action plans to improve it according to industry best practices and standards.
- Contribute to the overall technology plan for the organization, ensuring that technologies like Zscaler, GCP, and Palo Alto integrate seamlessly with other parts of the technical infrastructure and ecosystem.
- Provide advice, guidance, and direction to the team, ensuring that product development adheres to schedules and quality standards.
- Offer last-tier support for operations and support teams, conducting root cause analysis and preventative analyses.
- Create and enforce system standards for network environments and direct system installations.
- Train and guide other members of the Network team.
- Act with integrity, professionalism, and personal responsibility to uphold KPMG's respectful and courteous work environment.
Qualifications
- Minimum five years of recent experience with Web proxy products such as ZScaler, Palo Alto Prisma, and other competitive vendors, and cloud environments like Azure and GCP.
- Deep expertise with Palo Alto firewalls, including physical (Strata) and virtual (VM-Series) form factors, Panorama management, and Prisma Access/SaaS security.
- Bachelor's degree from an accredited college or university preferred; a high school diploma or GED is required.
- Hands-on experience in Google Cloud Platform (GCP) engineering, particularly in VPC design, Cloud Armor, and integrating security appliances within a cloud-native environment.
- Proven experience in Zscaler platform engineering, including the design, implementation, and management of Zscaler Internet Access (ZIA) and Zscaler Private Access (ZPA) solutions.
- Strong background in network automation and "Infrastructure as Code" (e.g., Terraform, Ansible) to streamline firewall and proxy deployments.
- Excellent verbal and written communication skills, capable of interacting effectively with individuals at all levels of responsibility and authority.
- Ability to prioritize tasks, delegate responsibilities, and foster high-performance teams, leading an environment driven by customer service and teamwork.
- Strong trouble-shooting and organizational skills, able to manage multiple projects simultaneously.
- Ability to participate in resource planning processes based on defined organizational plans.