Security Engineer - ZscalerOverview/ Job ResponsibilitiesWorking with an enterprise network architecture, engineering, and implementation team supporting our Federal customer, the
Security Engineering role will focus on providing Zscaler Engineering support and will be responsible for implementing the ZScaler solutions to manage connections between CISA users and cloud environments, applying IT Security Governance policies to prevent data exposure, ensure compliance across SaaS applications, and drive innovation for management, functionality, and reporting between disparate mission and IT groups.
Responsibilities:• The Zscaler Engineer is responsible for the engineering, design, test, and implementation of ZScaler internet (TIC) and private access (VPN replacement) solution.
• Support of the development of the Technical Requirements Document and a Detailed Design Document (DDD) for the network architecture, consistent with the associated Functional Requirements Document and DDD, before transitioning to Operations.
• Development and maintenance of monitoring processes and procedures supporting a 24/7/365 Network Operations Center (NOC).
• Support of all updates to all documents when there is change in the network design and/or technologies and collaborating with all stakeholders to test all related systems and application migration processes to verify that the systems meet requirements and can host applications with no degradation to performance or security.
• Preparation of test reports and Implementation Plans for each change impacting the network environment
• Implements the ZScaler solution across an enterprise.
• Implements Data Loss Prevention (DLP) practices and policies.
• Managing user access controls in cloud environments.
• Serves as a Subject Matter Expert in the advanced CASB, DLP, API, SD-WAN, and location implementation and best practices around those implementations.
• Provides internal consulting, technical guidance, information and support to application developers, computer operations, company management and departmental clients. Assists in internal training programs
• Must be able to work with minimal supervision and possess excellent written and verbal communication skills
• Other duties as assigned.
Qualifications- Requires hands-on experience in Network Design, Network Engineering, Network Operational Support, and cloud engineering experience of Medium to Large enterprise network environments.
- Experience implementing the ZScaler CASB solution in an enterprise.
- Experience with Zscaler or related Data Loss Prevention (DLP) practices and policies.
- Experience with managing user access controls in cloud environments.
- Experience with ServiceNow, Jira, VMware vCenter, cloud computing concepts
- Experience with cloud reporting with preparation for both internal and executive stakeholders
- Experience migrating from legacy on-prem networking to the cloud networking
- Experience with traditional on-premises proxies
- Experience with cloud-based proxy concepts
- Experience with Cloud Identity and Access Management
- Experience deploying and managing virtual servers on premise and in the cloud
- Experience with concepts and operations of cloud-based on physical load balancers
- Experience with implementing and exporting audit trails
- Experience with cloud-based monitoring solutions
Clearance• Current DOW Secret or higher. Education & Experience• Bachelors AND 5 years' experience OR 9 years' experience in lieu of a degree.
Location• Arlington, Virginia Travel:• Occasional; 10%.
2576C
