Zero Trust Security Engineer

Duration
:
Permanent / Full-Time Employment

Compensation
:
Up to $130,000/yr

• Bachelor's degree in Cybersecurity, Information Technology, Computer Science, or related discipline (or equivalent experience)
• 6+ years of IT infrastructure, networking, or cybersecurity experience
• 3+ years of dedicated cybersecurity engineering experience focused on Zero Trust, network security, or secure access technologies
• Strong understanding of Zero Trust architecture, least privilege access, micro‑segmentation, and identity‑centric security models
• Hands‑on experience implementing and managing network segmentation initiatives
• Experience securing complex enterprise environments through firewall management, web application firewalls (WAFs), proxy technologies, and advanced network security controls
• Experience with SASE/ZTNA platforms such as Netskope, Zscaler, Cloudflare, or similar solutions
• Strong understanding of Microsoft Entra  (Azure AD) Conditional Access and modern identity security controls
• Experience working with cloud environments including Azure, AWS, and/or Oracle Cloud Infrastructure (OCI)
• Strong troubleshooting, documentation, and communication skills

• Utility, energy, or regulated industry experience
• Critical infrastructure experience (utilities, manufacturing, healthcare, transportation, etc.)
• Experience supporting 24/7 operational environments
• Experience with IT/OT network convergence and industrial control system security
• Familiarity with NERC CIP or similar compliance frameworks

• Netskope, Zscaler, or Cloudflare security certifications
• Microsoft SC-200 or SC-300
• CISSP
• CCSP
• Oracle Cloud Infrastructure Security Professional
• Palo Alto, Fortinet, or other network security certifications

Our client is seeking a Zero Trust Security Engineer to help design, implement, and mature the organization's Zero Trust security architecture across enterprise IT, cloud, and operational technology (OT) environments.

This is a highly technical, hands‑on engineering role focused on network segmentation, identity‑driven security, secure access controls, SASE/ZTNA technologies, firewall architecture, web application security, and Zero Trust design principles. This is not a traditional network administrator position and is not focused solely on keeping networks operational.

The ideal candidate has experience building and securing enterprise networks, implementing segmentation strategies, managing modern security platforms, and reducing risk through identity‑centric security controls. They should understand both networking and cybersecurity and be capable of driving the organization's transition from legacy perimeter‑based security to a modern Zero Trust architecture aligned with NIST 800-207.

This role supports a 24/7 critical infrastructure environment where security, reliability, and uptime are equally important.

Exact compensation may vary based on several factors, including skills, experience, and education. Benefit packages for this role may include healthcare insurance offerings and paid leave as provided by applicable law.