Network Security Engineer

The Network Security Engineer will design, implement, and operate the company’s Zscaler environment and associated network security controls based on zero-trust and secure access principles. This role coordinates with cross-functional teams to protect connectivity, segmentation, identity, traffic inspection, data protection, and policy management across internal and cloud resources.

Responsibilities

• Design, implement, administer, and troubleshoot Zscaler ZIA, ZPA, Client Connector, App Connectors, traffic forwarding, and TLS inspection, including secure web gateway, firewall, threat protection, CASB, and DLP controls.
• Secure employee access to internet, SaaS, and private applications using identity-, device-, risk-, and data-aware policy controls.
• Design secure connectivity and segmentation for on-premises and cloud workloads, private applications, administrative services, and machine-to-machine communications.
• Integrate Zscaler with identity, endpoint, cloud, certificate, SIEM, and incident-response platforms.
• Develop and maintain the target architecture and roadmap for Zscaler, zero-trust networking, secure access, and cloud workload protection.
• Partner with business and technical stakeholders to evaluate user and application access, traffic and data flows, availability needs, performance requirements, and security needs.
• Develop, test, document, and maintain access, data-protection, traffic-inspection, segmentation, and exception policies.
• Govern internet, SaaS, and private-application access and protect source code, credentials, intellectual property, customer information, and other sensitive data.
• Monitor Zscaler logs and create alerts for threats, sensitive-data exposure, policy bypass, anomalous traffic, and administrative changes.
• Provide reporting on platform health, traffic trends, policy effectiveness, exceptions, incidents, and remediation progress.
• Automate configuration, validation, reporting, and compliance activities using APIs, scripting, or infrastructure-as-code tools.
• Maintain architecture diagrams, operational procedures, troubleshooting guides, and incident-response runbooks.

Requirements

• 2+ years of network, cloud, or security engineering experience, including meaningful production experience with Zscaler ZIA, ZPA, and Client Connector.
• Strong knowledge of TCP/IP, routing, DNS, HTTP/S, TLS, certificates, proxies, GRE, IPsec, identity federation, device posture, CASB, and DLP.
• Experience designing secure connectivity for internet, SaaS, private applications, and cloud workloads in at least one major public-cloud platform.
• Experience integrating network security platforms with identity, endpoint, certificate, SIEM, and incident-response systems.
• Experience with Zscaler Cloud Connector, Zero Trust Gateway, ZDX, Browser Isolation, Cloud NSS, or related Zscaler capabilities.
• Experience with Terraform, Python, PowerShell, REST APIs, Git, or CI/CD automation.
• Zscaler, cloud, networking, or security certifications.
• Advanced troubleshooting of routing, authentication, certificates, proxies, application connectivity, traffic forwarding, and performance issues.
• Ability to convert security and connectivity requirements into identity- and risk-based policies.
• Strong documentation, project ownership, communication, and cross-functional collaboration skills.
• Capability to balance security requirements with user experience, application performance, and business needs.

Required Technologies

Zscaler ZIA, Zscaler ZPA, Client Connector, App Connectors, traffic forwarding, TLS inspection, secure web gateway, firewall, threat protection, CASB, DLP, Zscaler Cloud Connector, Zero Trust Gateway, ZDX, Browser Isolation, Cloud NSS, Terraform, Python, PowerShell, REST APIs, Git, CI/CD, TCP/IP, DNS, HTTP/S, TLS, certificates, proxies, GRE, IPsec, identity federation, device posture, SIEM

Location and Work Setup

Roseville, MN (hybrid)

Work is primarily performed in an office or remote-work environment using standard computer and collaboration tools.

Compensation

USD 95,000 - 110,000 per year

Benefits

• Insurance coverage for medical, dental, vision, life, and disability
• Generous retirement plans
• Voluntary benefit plans
• Parental leave
• Substantial paid time off
• Holiday pay

Office, Travel, and On-Call

• Periodic after-hours support and on-call participation may be required.
• Up to 10% travel may be required.

Physical Requirements

• Sitting for extended periods at a workstation and during meetings, including while traveling by plane or car.
• Ability to lift up to 20 pounds as frequently as needed to move objects.
• Dexterity to write and manipulate a computer keyboard and mouse.
• Ability to hear and speak clearly.
• Ability to distinguish between colors on graphs and charts.
• Occasional visits to construction jobsites, which may involve dirt, dust, uneven surfaces, outdoor weather conditions, and extreme temperatures.