Network Security Engineer

Network Security Engineer

Location: Des Moines, IA (Must be Willing to Relocate within 2 weeks of an Offer)

Duration: 12 Month Contract, Likely Extensions

• Platform Administration with Zscaler (ZIA, ZPA, Client Connector, ZDX)
• Check Point Firewall Administration Experience (configuration and policy management)
  • Plus if experience importing/exporting between servers or domains
• Strong Networking Experience (TCP/IP, DNS, VPN technologies)

• Familiarity with NIST Framework
• Experience with Zscale Migrations/New Implementations
• Hands-on experience with Zscaler design and deployment (policy creation, troubleshooting, log analysis).
• Experience with Check Point firewall administration, including IPS configuration and policy management.
• Exposure to Cisco FTD IDS and Any Connect VPN solutions.
• Ability to work in a fast-paced environment and collaborate across teams.

The Network Security Engineer will join a specialized team focused on securing enterprise connectivity through Zscaler's cloud-based security platform, while also supporting perimeter security with Check Point firewalls. This role emphasizes the design, deployment, and optimization of Zscaler services for secure web access, remote connectivity, and digital experience monitoring, alongside maintaining robust firewall protections and IDS capabilities.

• Zscaler Platform Administration (Primary Focus)
  • Configure, manage, and optimize Zscaler Internet Access (ZIA) as the enterprise web proxy and content filtering solution.
  • Design, deploy, and maintain Zscaler Private Access (ZPA) for zero-trust remote access/VPN.
  • Oversee enterprise-wide deployment, health, and troubleshooting of the Zscaler Client Connector agent.
  • Utilize Zscaler Digital Experience (ZDX) to monitor performance, proactively detect issues, and drive user experience improvements.
  • Plan and execute deployment and migration between Zscaler tenants, including:
    • policy/export-import strategy, app segment and connector mapping,
    • identity provider integrations and certificate management,
    • phased cutover plans, pilot/validation, rollback readiness,
    • post-migration tuning and stakeholder communications.
• Perimeter Security
  • Administer Check Point firewalls (with IPS enabled) for robust network edge protection and policy management.
  • Support Cisco FTD for IDS use cases and maintain Cisco Any Connect headends as a secondary VPN solution. (
    
    Note:
    
    IDS/IPS tuning is not in scope of this role.)
• Compliance & Documentation
  • Ensure configurations and processes align with the NIST Cybersecurity Framework.
  • Maintain accurate documentation (standards, SOPs, network/security diagrams) and contribute to architecture reviews.