Cloud Network Security Engineer
Job Summary
We are seeking a highly skilled Senior Network Security Engineer to support a strategic Network Security Transformation Program for a leading Insurance customer. The successful candidate will be responsible for designing, implementing, and supporting enterprise network security solutions with a strong focus on Zscaler, Fortinet, and Lumio technologies.
This is a hands-on engineering role requiring deep technical expertise in network security operations, security architecture, Firewall management, Zero Trust access, cloud-delivered security, and network visibility platforms.
The ideal candidate will have experience working in large enterprise environments and be comfortable driving security improvements across both traditional and modern network infrastructures.
Key Responsibilities
- Design, implement, and maintain enterprise network security solutions.
- Engineer and support Zscaler Internet Access (ZIA) and Zscaler Private Access (ZPA) environments.
- Manage and optimize Fortinet security platforms including FortiGate, FortiManager, and FortiAnalyzer.
- Utilize Lumio for network observability, traffic analysis, security monitoring, and troubleshooting.
- Support enterprise Zero Trust and Secure Access Service Edge (SASE) initiatives.
- Perform Firewall policy reviews, rule optimization, and security hardening activities.
- Monitor network security posture and proactively identify risks and vulnerabilities.
- Support cloud connectivity and secure access solutions across hybrid environments.
- Troubleshoot complex network and security incidents.
- Work closely with Infrastructure, Cloud, Security Operations, and Architecture teams.
- Create and maintain technical documentation, standards, and operational procedures.
- Participate in security audits, risk assessments, and compliance activities.
Required Skills & Experience
Zscaler
- Strong hands-on experience with:
- ZIA (Zscaler Internet Access)
- ZPA (Zscaler Private Access)
- Cloud Proxy Technologies
- Zero Trust Network Access (ZTNA)
- Secure Service Edge (SSE)
Fortinet
- Hands-on administration and engineering experience with:
- FortiGate
- FortiManager
- FortiAnalyzer
- FortiWeb (preferred)
- SD-WAN
Lumio
- Experience using Lumio for:
- Network visibility
- Traffic analytics
- Security monitoring
- Performance troubleshooting
- Operational reporting
Network Security
- Firewall Management
- VPN Technologies
- IDS/IPS
- Network Segmentation
- Secure Remote Access
- Threat Detection and Response
- Network Monitoring
Networking
- TCP/IP
- Routing & Switching
- BGP
- OSPF
- DNS
- DHCP
- Load Balancing
- WAN and SD-WAN Technologies
Cloud & Infrastructure
- AWS and/or Azure networking concepts
- Hybrid network architectures
- Cloud security fundamentals
Preferred Experience
- Insurance or Financial Services industry experience.
- Experience supporting enterprise environments with 10,000+ users.
- Experience with Zero Trust transformation programs.
- Familiarity with SIEM and monitoring platforms.
- Scripting and automation experience using Python, PowerShell, or Ansible.
Certifications Preferred
- Zscaler Certified Administrator (ZCA)
- Zscaler Certified Expert (ZCE)
- Fortinet NSE 4/5/7 or equivalent
- CISSP
- CCNP Security
- CCIE Security
- AWS Security Specialty
- Azure Security Engineer
Candidate Profile
- Strong hands-on engineer rather than purely architectural.
- Able to independently troubleshoot and resolve complex network security issues.
- Experience working in enterprise-scale environments.
- Excellent communication and stakeholder management skills.
- Passionate about network security, Zero Trust, and modern security technologies.