SENIOR NETWORK SECURITY ENGINEER-(REMOTE)
About The Position
Compass Technology is an internal team supporting enterprise-wide initiatives for Compass Group, including IT infrastructure, cybersecurity, cloud engineering, AI, and application development. The Network Services team builds, supports, and optimizes Compass North America's network across on-premises and cloud environments, collaborating with technology teams in the Enterprise Architecture and Shared Services Technology division. The Senior Network Security Engineer designs, deploys, and supports secure network access and zero trust architecture across cloud and on-premises environments. As a technical leader on the Network Services team, this role leads zero trust architecture design, deployment, and operations, with primary ownership of the Zscaler suite—including ZIA, ZPA, and ZTNA—across on-premises and AWS environments. The engineer partners with Cyber Security and Cloud teams to expand ZPA access to private applications. An initial focus is a proof of concept evaluating Zscaler's Zero Trust Exchange for modernizing private application connectivity in AWS.
Requirements
- At least 5 years of experience in network security, cybersecurity engineering, or network engineering with a strong security emphasis.
- Hands-on experience administering Zscaler ZIA and ZPA at scale, including policy creation, Client Connector deployment, and App Connector hosting.
- Practical understanding of Zero Trust Network Access principles and least-privilege, per-application access models.
- Working knowledge of AWS cloud networking, including VPCs, route tables, security groups, Transit Gateway, and PrivateLink.
- Strong familiarity with identity and SSO technologies, including SAML 2.0, OIDC, Microsoft Entra ID, MFA, and conditional access.
- Solid foundation in TCP/IP, DNS, DHCP, routing, and SSL/TLS certificates.
- Ability to read logs, packet captures, and HAR files to isolate and resolve faults.
- Strong knowledge of security concepts and protocols such as IPSec, SSL/TLS, IDS/IPS, WAF, and DDoS protection.
- Knowledge of cloud and hybrid cloud networks, especially AWS networking design principles.
- Bachelor's degree in computer science, or a combination of education and experience.
- Excellent verbal and written communication skills.
- Excellent critical-thinking and problem-solving skills.
- Positive attitude and solutions-oriented thinking.
- Ability to communicate technical concepts to technical and non-technical audiences.
Nice To Haves
- AWS WAF and AWS Firewall Manager experience.
- Aviatrix experience.
- Scripting and automation experience with PowerShell, Python, or Terraform, including Zscaler providers.
- AWS or equivalent cloud certification, such as AWS Practitioner.
- Zscaler certification, such as ZIA Certified Administrator, ZPA Professional, Zscaler Digital Transformation Administrator (ZDTA), or Zscaler Digital Experience Administrator (ZDXA).
- AWS Advanced Networking Specialty certification.
- Security certification such as CompTIA Security+ or SANS/GIAC.
- ITIL v3 Foundation.
Responsibilities
- Research, collaborate, design, troubleshoot, and respond across teams and technologies in support of Compass on-premises and cloud environments.
- Lead platform optimization and long-term issue resolution efforts.
- Perform weekly, monthly, and quarterly backup and restore testing and validation.
- Provide tier 3 support for incidents involving technologies owned and supported by the Network Services group.
- Serve as the subject matter expert for Zscaler Zero Trust Exchange, including ZIA, ZPA, Zscaler Client Connector (ZCC), and ZDX; manage tenant configuration, policy design, and lifecycle management.
- Deploy, validate, and maintain ZPA App Connectors across AWS, on-premises, and branch environments to provide least-privilege, per-application access.
- Design and fine-tune access policies covering application segmentation, URL filtering, SSL/TLS inspection, cloud firewall, sandboxing, and data loss prevention.
- Configure and maintain forwarding profiles, SSL inspection, and secure web gateway controls, tuning for security and user experience.
- Lead a proof of concept evaluating Zscaler Zero Trust Exchange for private application access in AWS and help define the connectivity modernization roadmap based on the results.
- Monitor tenant health, security events, and digital experience with ZDX; troubleshoot client connectivity, authentication, and policy-enforcement issues using logs, packet captures, and HAR files.
- Integrate Zscaler with Microsoft Entra ID using SAML and OIDC for SSO, MFA, and conditional access, and support ZCC deployment through endpoint management tools such as Intune.
- Participate in incident, problem, and change management through CAB-controlled processes.
- Author runbooks, standard operating procedures, and network diagrams.
Benefits
- Medical insurance
- Dental insurance
- Vision insurance
- Life and AD insurance
- Disability insurance
- Retirement plan
- Paid time off
- Holiday time off (varies by site/state)
- Associate Shopping Program
- Health and Wellness Programs
- Discount Marketplace
- Identity Theft Protection
- Pet Insurance
- Commuter Benefits
- Employee Assistance Program
- Flexible Spending Accounts (FSAs)
- Paid Parental Leave
- Personal Leave
- Potential eligibility for paid and/or unpaid time off benefits in accordance with applicable laws
Stand Out From the Crowd
Upload your resume and get instant feedback on how well it matches this job.
What This Job Offers
Job Type
Full-time
Career Level
Senior
