Security Network Engineer

Responsibilities

• Assess the current Zscaler and Cisco Viptela landscape to identify gaps, risks, and opportunities for improved secure connectivity.
• Compare agent-based and tunnel-based deployment approaches, then recommend the most effective model for business, security, and operational needs.
• Develop and test failover designs across multiple network circuits to reduce user disruption during provider or path changes.
• Refine traffic steering and policy behavior to improve session stability and application access within the SD-WAN environment.
• Preserve key identity-related data used for security enforcement and visibility, including user and device context across network flows.
• Partner with internal technical teams and external service providers to implement configuration improvements and validate outcomes.
• Troubleshoot complex issues involving cloud security controls, SD-WAN routing behavior, and end-user connectivity.
• Produce clear technical documentation covering findings, recommended changes, and the target-state architecture.
• Advise on routing, segmentation, and secure access strategies involving technologies such as BGP, Cisco routing platforms, Cisco ASA, Palo Alto Firewall, and related network security tools.
• Demonstrated expertise with Zscaler Internet Access, Zscaler Client Connector, and secure tunnel deployment methods in enterprise environments.
• Strong hands-on experience with Cisco Viptela SD-WAN, including path selection, resiliency planning, and failover behavior.
• Deep understanding of identity-aware security policy design and the importance of maintaining user and device context across traffic flows.
• Proven ability to troubleshoot integrations between cloud-delivered security platforms and complex SD-WAN architectures.
• Solid background in enterprise network security, including segmentation, traffic engineering, and high-availability design.
• Practical knowledge of BGP, Cisco routers, Cisco ASA, Palo Alto Firewall, and broader network security infrastructure.
• Ability to provide both architecture-level guidance and detailed configuration recommendations in a consulting environment.
• Relevant Zscaler or Cisco certifications are preferred.

Qualifications

• Advanced technical judgment and hands-on experience with Cisco Viptela SD-WAN.
• Expertise with Zscaler Internet Access, Zscaler Client Connector, and secure tunnel deployment methods.
• Strong troubleshooting skills with cloud security controls, SD-WAN routing behavior, and end-user connectivity.
• Experience with identity-aware security policy design and maintaining user/device context across traffic flows.
• Proven ability to work effectively with internal technical teams and external service providers.
• Knowledge of BGP, Cisco routers, Cisco ASA, Palo Alto Firewall, and broader network security infrastructure.
• Relevant certifications from Zscaler or Cisco are preferred.