Network Security Engineer Remote Office

Remote Office;
Salt Lake City, Utah, United States

Legato Security is an information security firm founded upon the belief that every organization has the right to keep its data private and secure. Our mission is to build close partnerships with our clients, serving them not as just a vendor, but as trusted advisors helping to build effective, proactive plans. Our focus is always on both the technical and human elements within an organization.

We believe in comprehensive strategies designed to harden networks, deflect attackers, and rapidly recover from any accidents. As technology progresses, so do our tactics, ensuring our experts are always prepared to serve forward-looking leaders eager to stay ahead of emerging threats.

We are seeking a Network Security Engineer to join our Network team. This role will support the administration, implementation, troubleshooting, design, and ongoing improvement of our customers networks and security environments.

The ideal candidate will have hands‑on experience with network security technologies such as firewalls, Zscaler, Netskope, VPNs, routing, switching, or related technologies. Extensive experience with every platform is not required, but a strong networking foundation, practical troubleshooting ability, good communication skills, and a willingness to continually learn are essential.

This position will work across a variety of operational and project-based activities, including customer requests, incidents, service tickets, troubleshooting, implementations, migrations, upgrades and changes, and technical projects. Because the role supports multiple customers and environments, the successful candidate must be able to communicate effectively, manage competing priorities, adapt to different technical requirements, and see issues through to resolution.

This position is hybrid and mostly remote in nature, but may require some time in office (Downtown Salt Lake City) for troubleshooting, updating, and replacing network equipment; client visits as required, etc. Some time on‑call is required, but this will rotational and not extensive.

• Support, administer, configure, and troubleshoot firewalls, Zscaler services, Netskope, VPN technologies, and related network security platforms, both internal and in customer environments
• Work directly with customers to understand business and technical requirements, troubleshoot problems, evaluate potential solutions, and implement appropriate changes
• Respond to and resolve service tickets, incidents, requests, and escalations involving network connectivity, firewalls, Zscaler, Netskope, and related technology
• Serve as an escalation point for technical issues that require additional troubleshooting, analysis, or expertise beyond initial support
• Support, configure, and troubleshoot firewall and network product environments to meet customer connectivity and security requirements
• Participate in firewall, Zscaler, and Netskope implementation, migration, upgrade, replacement, and configuration projects.
• Assist with the configuration and maintenance of Zscaler Internet Access (ZIA), Zscaler Private Access (ZPA), Zscaler Client Connector, and related services
• Assist with the configuration and maintenance of the Netskope One platform including SASE, SSE, CASB, SWG, Private Access, Cloud Firewall, SD-WAN, and more
• Support Zscaler and Netskope policies including URL filtering, firewall policies, SSL inspection, authentication, access policies, application access, traffic forwarding, connectivity, routing, DNS, DHCP, NAT, VPNs, authentication, traffic forwarding, SSL/TLS inspection, application access, VLANs, switching technologies, and policy enforcement
• Configure and…