Senior Network Security Engineer

About this role

Company Description

Zayo provides mission-critical bandwidth to the world’s most impactful companies, fueling the innovations that are transforming our society. Zayo’s 141,000-mile network in North America and Europe includes extensive metro connectivity to thousands of buildings and data centers. Zayo’s communications infrastructure solutions include dark fiber, private data networks, wavelengths, Ethernet, and dedicated Internet access. Zayo serves wireless and wireline carriers, media, tech, content, finance, healthcare and other large enterprises.

We are seeking a highly experienced Senior Network Security Architect to serve as a technical leader responsible for the design, implementation, optimization, and operational support of our enterprise network security environment. This role combines hands-on engineering, solution architecture, and Level 3 operational support responsibilities across multiple network security technologies, with a strong emphasis on Zscaler, Zero Trust, and cloud security.  

The ideal candidate is an experienced network security professional who can balance strategic architecture with day-to-day operational leadership. You will partner closely with Network, Security, Identity, Infrastructure, and Application teams to deliver scalable, secure, and highly available solutions while mentoring engineers, leading complex troubleshooting efforts, and driving operational excellence.  

Key Responsibilities  

Network Security Architecture  

• Design, implement, and optimize enterprise network security solutions supporting on-premises, cloud, and hybrid environments.  

• Architect scalable Zero Trust security solutions utilizing technologies including Zscaler, next-generation firewalls, VPNs, secure web gateways, cloud security services, and network segmentation.  

• Lead evaluations, Proofs of Concept (POCs), and implementation of new security technologies and services.  

• Develop technology roadmaps, standards, and best practices for enterprise network security.  

• Collaborate with network, security, infrastructure, and identity teams to ensure secure and resilient architectures.  

Engineering & Operations  

• Serve as the senior technical escalation point for complex network security incidents and production issues.  

• Troubleshoot advanced networking, DNS, routing, authentication, proxy, SSL/TLS, and application connectivity issues.  

• Configure, manage, and optimize enterprise security technologies including firewalls, VPNs, secure web gateways, cloud access security solutions, and Zero Trust platforms.  

• Perform root cause analysis for recurring or high-impact incidents and drive long-term remediation.  

• Monitor platform health, performance, and user experience using enterprise monitoring and observability tools.  

• Participate in critical incident response and support a highly available production environment.  

• Zscaler Administration  

• Administer and optimize Zscaler services including ZIA, ZPA, and ZDX.  

• Configure security policies, SSL inspection, traffic forwarding, PAC files, IPSec/GRE tunnels, and App Connector deployments.  

• Support Zero Trust access policies, secure application access, and cloud security initiatives.  

• Collaborate with identity teams to integrate authentication platforms including Microsoft Entra ID (Azure AD), CyberArk, SailPoint, and other enterprise identity providers.  

Security Governance & Automation  

• Develop and maintain security standards, configuration management processes, and operational procedures.  

• Implement automation to improve deployment, monitoring, configuration management, and operational efficiency.  

• Support compliance initiatives by ensuring network security solutions align with organizational policies and regulatory requirements.  

• Develop and maintain runbooks, playbooks, technical documentation, and operational standards.  

Leadership & Collaboration  

• Provide technical leadership and mentorship to engineering and operations teams.  

• Lead technical discussions across infrastructure, networking, security, identity, and application teams.  

• Share knowledge through documentation, training, and operational guidance.  

• Drive continuous improvement initiatives focused on service reliability, operational maturity, and customer experience.  

Required Qualifications  

• Minimum of seven (7) years of experience in network security, cybersecurity, or infrastructure engineering.  

• Strong experience designing, implementing, and supporting enterprise network security technologies.  

• Minimum of three (3) years of hands-on experience with Zscaler technologies, including ZIA, ZPA, and/or ZDX.  

• Experience administering one or more enterprise firewall platforms such as Palo Alto, Cisco, Fortinet, or Check Point.  

• Strong understanding of:  

• Network security architecture  

• Zero Trust principles  

• Secure Web Gateway technologies  

• VPN technologies  

• DNS  

• Routing and switching fundamentals  

• SSL/TLS  

• Identity and authentication  

• Experience with cloud security and hybrid network architectures .  

• Experience troubleshooting complex production issues and serving as a senior escalation resource.  

• Familiarity with enterprise identity providers such as Microsoft Entra ID (Azure AD), SailPoint , or CyberArk.  

• Excellent analytical, troubleshooting, documentation, and communication skills.  

Preferred Qualifications  

• Zscaler certifications (ZCP, ZDTA, ZDTE, ZDXA).  

• CISSP, CISM, Security+, Network+, GIAC, CCNP Security, PCNSE, or equivalent certifications.  

• Experience with scripting and automation using Python, PowerShell, or Shell.  

• Experience with CI/CD, Infrastructure as Code, and configuration management tools.  

• Familiarity with compliance frameworks such as PCI-DSS, SOX, HIPAA, or NIST.  

• Bachelor's degree in Computer Science , Information Technology, Cybersecurity

Similar jobs

• Senior Network Security Engineer — Penumbrainc · Alameda, CA
• Senior Network Security Engineer — Comcast · PA - West Chester, 1354 Boot Rd | NJ - Mount Laurel, 1800 Bishops Gate | PA - Philadelphia, 1800 Arch St
• Senior Network Engineer — Ardentmc · Washington, D.C. Metro
• Senior Network Engineer — Avav · Annapolis Junction, MD
• Senior Network Engineer — Faradayfuture · El Segundo, California, United States
• Senior Network Engineer — Rockstargames · Carlsbad, California, United States
• Senior Network Engineer — Lightningai · Remote
• Senior Network Engineer — K2spacecorporation · Los Angeles, CA