Network Security Engineer SME

Ideal Innovations, Inc. • Clarksburg, WV

4d • Onsite

About The Position

This is a rare opportunity to lead a high-impact Zero Trust transformation supporting the FBI CJIS division, driving the shift from legacy network security to a modern, cloud-first architecture powered by Zscaler. You will play a key role in implementing cutting-edge security capabilities aligned with TIC 3.0 while working alongside highly experienced engineers in a mature SAFe Agile environment. This role offers the chance to shape future-state architecture, solve complex challenges at scale, and build highly marketable expertise across both federal and commercial sectors. The team consists of a collaborative mix of government personnel and contractor staff from multiple organizations, working together in a mature SAFe Agile environment. The culture emphasizes teamwork, technical excellence, and shared accountability, with a strong focus on delivering high-quality solutions to mission-critical systems. This role combines hands-on engineering, architecture, and transformation leadership in a single position. It provides the opportunity to work on a large-scale Zscaler implementation and Zero Trust initiative that is directly aligned with federal modernization efforts such as TIC 3.0. The position offers exposure to complex enterprise environments and the ability to make meaningful, visible contributions to a high-profile mission. The individual in this role will play a critical part in modernizing the organization’s security posture, enabling secure, cloud-first access to applications and services. Their contributions will help reduce reliance on legacy infrastructure, improve visibility and control, and enhance overall cybersecurity capabilities through the implementation of Zero Trust principles.

Requirements

• Hands-on experience with Zscaler (ZIA/ZPA) or comparable cloud security / SWG / ZTNA platforms strongly preferred
• 10+ years of network security or cybersecurity engineering experience required
• Proven experience as a technical lead / SME on enterprise network or security projects
• Experience supporting large-scale network security migrations (e.g., proxy/VPN to cloud-based or Zero Trust architectures)
• Experience supporting Zero Trust architecture or modern secure access solutions
• Experience integrating with identity providers (Active Directory, Azure AD, SAML/OIDC)
• Strong background in enterprise networking and security, including firewalls (Palo Alto, Cisco, etc.), routing, DNS, and proxy architectures
• Experience with SIEM/logging platforms (Splunk preferred)
• Experience troubleshooting complex network and security issues in enterprise environments

Nice To Haves

• Zscaler certifications (e.g., ZDTA, ZDTE, ZCCA-IA, ZCCA-PA)
• Experience leading or supporting a Zscaler ZIA/ZPA enterprise deployment
• Familiarity with CISA TIC 3.0 and federal network security modernization initiatives
• Experience replacing on-prem forward proxies and/or VPNs with cloud-delivered security solutions
• Knowledge of Zero Trust architecture (ZTA) and SASE frameworks
• Experience designing or implementing direct-to-cloud access architectures (avoiding traditional network backhaul)
• Cloud experience with AWS and/or Azure, including networking and security integration
• Security certifications (e.g., Security+, CASP/X, CISSP)
• Cisco certifications (e.g., CCNA, CCNP)
• Experience working in a SAFe Agile environment using Jira and Confluence

Responsibilities

• Participate in SAFe Agile ceremonies (daily stand-ups, sprint planning, retrospectives) and deliver work within sprint cycles
• Lead the implementation of Zscaler ZIA and ZPA to support Zero Trust and cloud-delivered security objectives
• Develop and execute migration strategies to transition from legacy forward proxies and VPNs to Zscaler-based architectures
• Design direct-to-cloud connectivity solutions that eliminate on-premises traffic backhaul
• Configure and optimize Zscaler policies (URL filtering, SSL inspection, DLP, access controls) to meet security requirements
• Integrate Zscaler with enterprise identity providers (e.g., Active Directory, Azure AD) to enforce identity-based access
• Collaborate with cross-functional teams (network, security, cloud) to support Zero Trust and TIC 3.0-aligned architectures
• Manage and resolve complex network security issues, including traffic flow, access, and policy enforcement troubleshooting
• Support Operations & Maintenance (O&M) activities such as service ticket resolution, vulnerability remediation, and system sustainment
• Develop and maintain technical documentation, including architecture diagrams, implementation plans, and operational procedures

Benefits

• Ideal Innovations, Inc. is an Equal Opportunity Employer: All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, national origin, sexual orientation, gender identity, disability, or veteran status.
• Ideal Innovations, Inc. is a VEVRAA Federal Contractor.

What This Job Offers

• Job Type: Full-time
• Career Level: Senior
• Education Level: Associate degree