Senior Network Engineer (Chicago)
About The Position
Fitch Group is seeking a Senior Network Engineer based in its Chicago office. The Network Engineering team designs, operates, and continuously improves secure connectivity platforms that support reliable access for colleagues across office, remote, and cloud environments. The role partners with Security, Endpoint, Cloud, Reliability Engineering, Operations, and business teams to deliver supportable secure-access designs and reduce operational reliance on a small number of subject matter experts. The engineer will design, deploy, operate, and improve Zscaler Internet Access (ZIA) and Zscaler Private Access (ZPA), advancing Zero Trust access and secure connectivity to applications and workloads across multiple cloud environments. The role also includes setting and enforcing security policies, handling complex connectivity and access troubleshooting, supporting high-impact incident escalation, and contributing to network modernization and improved operational supportability.
Requirements
- Hands-on engineering experience with Zscaler ZIA and ZPA.
- Strong understanding of SSE, SASE, Zero Trust, secure web gateways, private application access, DLP, CASB, SSL inspection, and cloud security concepts.
- Strong networking fundamentals across routing, switching, DNS, proxy behavior, firewall policy, internet edge design, cloud connectivity, and troubleshooting.
- Ability to evaluate security-sensitive access designs, policy changes, traffic flows, and exceptions, balancing business needs, risk reduction, and protection of sensitive data.
- Ability to work effectively across engineering, security, cloud, endpoint, operations, and business teams.
- Strong ownership, clear communication, and a focus on supportable outcomes.
Nice To Haves
- Experience with scripting, APIs, automation, log analysis, packet capture tools, configuration validation, policy reporting, health checks, change readiness, or operational dashboards.
- Cisco, Meraki, SD-WAN, or traditional enterprise networking experience, especially in network modernization environments.
- Experience contributing to modernization programs such as Office Zero Trust, Wi-Fi, Meraki, cloud security enhancements, SD-WAN planning, and east-west inspection initiatives.
- Experience creating architecture diagrams, design documentation, standards, runbooks, troubleshooting guides, and knowledge-transfer materials that improve supportability and reduce single points of expertise.
Responsibilities
- Design, deploy, operate, and continuously improve Zscaler Internet Access (ZIA) and Zscaler Private Access (ZPA) for secure internet access, private application access, and user-to-application connectivity.
- Implement and mature Zero Trust Network Access, application segmentation, least-privilege access controls, and secure access patterns across remote, office, and cloud environments.
- Define, tune, and enforce policies for URL filtering, SSL inspection, cloud application controls, browser isolation, DLP, and AI/LLM usage controls.
- Enable secure access to workloads and applications hosted in AWS, Azure, OCI, and GCP, aligning designs with resilience, supportability, and network modernization goals.
- Lead complex troubleshooting of user access, application connectivity, authentication, policy enforcement, service health, and performance issues, including log analysis and packet captures.
- Provide support for high-impact incident escalations.
- Partner with Security, Endpoint, Cloud, Reliability Engineering, Operations, and business teams to deliver supportable secure-access designs.
- Contribute to documentation and knowledge-transfer materials that improve supportability and reduce single points of expertise.
Benefits
- Hybrid work environment, with 2 to 3 days a week in the office required based on line of business and location.
- Dedicated training, leadership development, and mentorship programs.
- Retirement planning programs.
- Tuition reimbursement programs.
- Comprehensive healthcare offerings supporting physical, mental, financial, social, and occupational wellbeing.
- Family-friendly policies, including a global parental leave plan.
- Employee Resource Groups.
- Paid volunteer days.
- Matched funding for donations.
- Opportunities to volunteer in the community.
Stand Out From the Crowd
Upload your resume and get instant feedback on how well it matches this job.
What This Job Offers
Job Type
Full-time
Career Level
Senior
Education Level
No Education Listed
