Network Security Engineer

Job Description Job Description Job title: Network Security Engineer
Location: Frederick, MD (Onsite)
Duration: 6 months
Salary Range: $58.00 - $60.00/Hour on W2 (Without Benefits).
Applicants must be willing to work on W2
Role Description:

• We are seeking a Network Security Engineer to own and operate our secure access and web security stack, with a strong foundation in network security and hands-on security analysis.
• The primary focus of this role is protecting user and application traffic across the enterprise network, with deep operational ownership of the Zscaler platform (ZIA, SIPA, ZDX).
• The ideal candidate combines solid network security fundamentals with the analytical skills to investigate events, assess risk, and drive secure configuration changes across a complex enterprise environment.

Key Responsibilities:

• Manage and support Zscaler Internet Access (ZIA), SIPA, and ZDX across the enterprise.
• Configure web filtering, URL categorization, SSL inspection, and security policies.
• Troubleshoot user access, authentication, and internet connectivity issues.
• Implement security changes and perform impact analysis before deployment.
• Monitor security events and integrate logs with the SIEM for detection and analysis.
• Support Zscaler Client Connector upgrades and broader endpoint security initiatives.
• Perform App Connector upgrades and migration activity for new enterprise applications.
• Support the enterprise GenAI solution for cloud app policy and source-based traffic path design.
• Implement Zscaler DLP for in-line web and endpoint policy enforcement.
• Analyze network firewall changes for critical scenarios, and prepare and submit change details for approval where required.
• Partner with application owners, network teams, and internal cybersecurity teams to ensure secure us Manage ServiceNow service requests and change tickets for security BAU tasks.

Required Qualifications

• Strong network security background, including firewall policy, routing and traffic flow, DNS, proxy, and secure connectivity concepts.
• Hands-on security analysis experience: investigating security events, correlating logs, and assessing the risk and impact of changes.
• Production experience administering Zscaler (ZIA, and ideally SIPA and ZDX), including web filtering, SSL inspection, and policy management.
• Experience integrating security telemetry with a SIEM and monitoring for security events.
• Working knowledge of endpoint security tooling and client-based secure access agents.
• Familiarity with change management and ITSM processes (ServiceNow requests and change).
• Strong troubleshooting, documentation, and cross-team communication skills.

Preferred Qualifications

• Experience with DLP (in-line web and endpoint) and cloud application security policy.
• Exposure to securing GenAI and cloud application traffic and source-based traffic path design.
• Relevant certifications (e.g., Zscaler ZDTA/ZCCA/ZCCP, Security+, CCNP Security, or equivalent).

Top 3 Required Skills

1. Zscaler Administration (ZIA, ZPA/SIPA, ZDX)
2. Network Security (Firewalls, DNS, Routing, Proxy, SSL Inspection)
3. Security Event Analysis, SIEM Monitoring, and Incident Investigation

Top 3 Preferred Skills

1. Data Loss Prevention (DLP) and Cloud Security Policy Management
2. GenAI Security and Cloud Application Traffic Management
3. ServiceNow Change Management and ITSM Processes

Education Requirements

• Bachelor's degree in Computer Science, Information Technology, Cybersecurity, or a related field (or equivalent experience)

Years of Experience

• 8+ years of Network Security experience
• 5+ years of hands-on Zscaler administration experience
• 7+ years in Zscaler Cloud Security Services