Network Security Engineer SME

Highlights

This is a rare opportunity to lead a high-impact Zero Trust transformation supporting the FBI CJIS division, driving the shift from legacy network security to a modern, cloud-first architecture powered by Zscaler. You will play a key role in implementing cutting-edge security capabilities aligned with TIC 3.0 while working alongside highly experienced engineers in a mature SAFe Agile environment. This role offers the chance to shape future-state architecture, solve complex challenges at scale, and build highly marketable expertise across both federal and commercial sectors.

Responsibilities

• Operate within a SAFe Agile environment, participating in ceremonies (daily stand-ups, sprint planning, retrospectives)
• Deliver work within sprint cycles
• Implement Zscaler ZIA and ZPA to support Zero Trust and cloud-delivered security objectives
• Develop and execute migration strategies to transition from legacy forward proxies and VPNs to Zscaler-based architectures
• Design direct-to-cloud connectivity solutions that eliminate on-premises traffic backhaul
• Configure and optimize Zscaler policies (URL filtering, SSL inspection, DLP, access controls) to meet security requirements
• Integrate Zscaler with enterprise identity providers (e.g., Active Directory, Azure AD) to enforce identity-based access
• Collaborate with cross-functional teams (network, security, cloud) to support Zero Trust and TIC 3.0-aligned architectures
• Manage and resolve complex network security issues, including traffic flow, access, and policy enforcement troubleshooting
• Support Operations & Maintenance (O&M) activities such as service ticket resolution, vulnerability remediation, and system sustainment
• Develop and maintain technical documentation, including architecture diagrams, implementation plans, and operational procedures

Requirements

• Hands-on experience with Zscaler (ZIA/ZPA) or comparable cloud security / SWG / ZTNA platforms
• 10+ years of network security or cybersecurity engineering experience
• Proven experience as a technical lead / SME on enterprise network or security projects
• Experience supporting large-scale network security migrations (e.g., proxy/VPN to cloud-based or Zero Trust architectures)
• Experience supporting Zero Trust architecture or modern secure access solutions
• Experience integrating with identity providers (Active Directory, Azure AD, SAML/OIDC)
• Strong background in enterprise networking and security, including firewalls (Palo Alto, Cisco, etc.), routing, DNS, and proxy architectures
• Experience with SIEM/logging platforms (Splunk preferred)
• Experience troubleshooting complex network and security issues in enterprise environments
• Zscaler certifications (e.g., ZDTA, ZDTE, ZCCA-IA, ZCCA-PA) are desired
• Familiarity with CISA TIC 3.0 and federal network security modernization initiatives
• Experience replacing on-prem forward proxies and/or VPNs with cloud-delivered security solutions
• Knowledge of Zero Trust architecture (ZTA) and SASE frameworks
• Experience designing or implementing direct-to-cloud access architectures (avoiding traditional network backhaul)
• Cloud experience with AWS and/or Azure, including networking and security integration
• Security certifications (e.g., Security+, CASP/X, CISSP) are desired
• Cisco certifications (e.g., CCNA, CCNP) are desired
• Experience working in a SAFe Agile environment using Jira and Confluence

Qualifications

• A degree may substitute for a portion of the required experience

Skills

• Hands-on experience with Zscaler (ZIA/ZPA) or comparable cloud security / SWG / ZTNA platforms

Benefits

• Day Shift 8am-5pm
• US Citizenship required
• Top Secret clearance required
• Location: FBI CJIS Campus (Clarksburg, WV)

Pay

N/A

Schedule

N/A

Company Info

Ideal Innovations, Inc. is an Equal Opportunity Employer: All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, national origin, sexual orientation, gender identity, disability, or veteran status. Ideal Innovations, Inc. is a VEVRAA Federal Contractor.