Network Security Engineer

The Network Security Engineer will join a specialized team focused on securing enterprise connectivity through Zscaler’s cloud-based security platform, while also supporting perimeter security with Check Point firewalls. This role emphasizes the design, deployment, and optimization of Zscaler services for secure web access, remote connectivity, and digital experience monitoring, alongside maintaining robust firewall protections and IDS capabilities.

Key Responsibilities
• Zscaler Platform Administration (Primary Focus)
• Configure, manage, and optimize Zscaler Internet Access (ZIA) as the enterprise web proxy and content filtering solution.
• Design, deploy, and maintain Zscaler Private Access (ZPA) for zero-trust remote access/VPN.
• Oversee enterprise-wide deployment, health, and troubleshooting of the Zscaler Client Connector agent.
• Utilize Zscaler Digital Experience (ZDX) to monitor performance, proactively detect issues, and drive user experience improvements.
• Plan and execute deployment and migration between Zscaler tenants, including:
• policy/export-import strategy, app segment and connector mapping,
• identity provider integrations and certificate management,
• phased cutover plans, pilot/validation, rollback readiness,
• post-migration tuning and stakeholder communications.
• Perimeter Security
• Administer Check Point firewalls (with IPS enabled) for robust network edge protection and policy management.
• Support Cisco FTD for IDS use cases and maintain Cisco AnyConnect headends as a secondary VPN solution. (Note: IDS/IPS tuning is not in scope of this role.)
• Compliance & Documentation
• Ensure configurations and processes align with the NIST Cybersecurity Framework.
• Maintain accurate documentation (standards, SOPs, network/security diagrams) and contribute to architecture reviews

Pay ranges $50 - $60/hr

We are a company committed to creating diverse and inclusive environments where people can bring their full, authentic selves to work every day. We are an equal opportunity/affirmative action employer that believes everyone matters. Qualified candidates will receive consideration for employment regardless of their race, color, ethnicity, religion, sex (including pregnancy), sexual orientation, gender identity and expression, marital status, national origin, ancestry, genetic factors, age, disability, protected veteran status, military or uniformed service member status, or any other status or characteristic protected by applicable laws, regulations, and ordinances. If you need assistance and/or a reasonable accommodation due to a disability during the application or recruiting process, please send a request to HR@insightglobal.com.To learn more about how we collect, keep, and process your private information, please review Insight Global's Workforce Privacy Policy: https://insightglobal.com/workforce-privacy-policy/.

• Platform Administration with Zscaler (ZIA, ZPA, Client Connector, ZDX)
• Check Point Firewall Administration Experience (configuration and policy management)
o Plus if experience importing/exporting between servers or domains
• Strong Networking Experience (TCP/IP, DNS, VPN technologies)

• Familiarity with NIST Framework
• Experience with Zscale Migrations/New Implementations
• Hands-on experience with Zscaler design and deployment (policy creation, troubleshooting, log analysis).
• Experience with Check Point firewall administration, including IPS configuration and policy management.
• Exposure to Cisco FTD IDS and AnyConnect VPN solutions.
• Ability to work in a fast-paced environment and collaborate across teams.

Benefit packages for this role will start on the 1st day of employment and include medical, dental, and vision insurance, as well as HSA, FSA, and DCFSA account options, and 401k retirement account access with employer matching. Employees in this role are also entitled to paid sick leave and/or other paid time off as provided by applicable law.