Network Security Engineer Germantown - MD - Maryland

Role Descriptions: SUMMARYWe are seeking a Network Security Engineer to own and operate our secure access and web security stack, with a strong foundation in network security and hands-on security analysis. The primary focus of this role is protecting user and application traffic across the enterprise network, with deep operational ownership of the Zscaler platform (ZIA, SIPA, ZDX). The ideal candidate combines solid network security fundamentals with the analytical skills to investigate events, assess risk, and drive secure configuration changes across a complex enterprise environment.KEY RESPONSIBILITIES1.Manage and support Zscaler Internet Access (ZIA), SIPA, and ZDX across the enterprise.2.Configure web filtering, URL categorization, SSL inspection, and security policies.3.Troubleshoot user access, authentication, and internet connectivity issues.4.Implement security changes and perform impact analysis before deployment.5.Monitor security events and integrate logs with the SIEM for detection and analysis.6.Support Zscaler Client Connector upgrades and broader endpoint security initiatives.7.Perform App Connector upgrades and migration activity for new enterprise applications.8.Support the enterprise GenAI solution for cloud app policy and source-based traffic path design.9.Implement Zscaler DLP for in-line web and endpoint policy enforcement.10.Analyze network firewall changes for critical scenarios, and prepare and submit change details for approval where required.11.Partner with application owners, network teams, and internal cybersecurity teams to ensure secure user access.12.Manage ServiceNow service requests and change tickets for security BAU tasks.REQUIRED QUALIFICATIONSStrong network security background, including firewall policy, routing and traffic flow, DNS, proxy, and secure connectivity concepts.Hands-on security analysis experience: investigating security events, correlating logs, and assessing the risk and impact of changes.Production experience administering Zscaler (ZIA, and ideally SIPA and ZDX), including web filtering, SSL inspection, and policy management.Experience integrating security telemetry with a SIEM and monitoring for security events.Working knowledge of endpoint security tooling and client-based secure access agents.Familiarity with change management and ITSM processes (ServiceNow requests and change).Strong troubleshooting, documentation, and cross-team communication skills.PREFERRED QUALIFICATIONSExperience with DLP (in-line web and endpoint) and cloud application security policy.Exposure to securing GenAI and cloud application traffic and source-based traffic path design.Relevant certifications (e.g., Zscaler ZDTAZCCAZCCP, Security+, CCNP Security, or equivalent).

Essential Skills: SUMMARYWe are seeking a Network Security Engineer to own and operate our secure access and web security stack, with a strong foundation in network security and hands-on security analysis. The primary focus of this role is protecting user and application traffic across the enterprise network, with deep operational ownership of the Zscaler platform (ZIA, SIPA, ZDX). The ideal candidate combines solid network security fundamentals with the analytical skills to investigate events, assess risk, and drive secure configuration changes across a complex enterprise environment.KEY RESPONSIBILITIES1.Manage and support Zscaler Internet Access (ZIA), SIPA, and ZDX across the enterprise.2.Configure web filtering, URL categorization, SSL inspection, and security policies.3.Troubleshoot user access, authentication, and internet connectivity issues.4.Implement security changes and perform impact analysis before deployment.5.Monitor security events and integrate logs with the SIEM for detection and analysis.6.Support Zscaler Client Connector upgrades and broader endpoint security initiatives.7.Perform App Connector upgrades and migration activity for new enterprise applications.8.Support the enterprise GenAI solution for cloud

Top 3 Required Skills:

1. Zscaler Administration (ZIA, ZPASIPA, ZDX)

2. Network Security (Firewalls, DNS, Routing, Proxy, SSL Inspection)

3. Security Event Analysis, SIEM Monitoring, and Incident Investigation

Top 3 Preferred Skills:

1. Data Loss Prevention (DLP) and Cloud Security Policy Management

2. GenAI Security and Cloud Application Traffic Management

3. ServiceNow Change Management and ITSM Processes

Education Requirements:

Bachelor s degree in Computer Science, Information Technology, Cybersecurity, or a related field (or equivalent experience)

Years of Experience:

8+ years of Network Security experience

5+ years of hands-on Zscaler administration experience