Network Engineer Expert

Accountabilities:

CASB Platform Administration: Serve as the primary administrator and subject matter expert for the Skyhigh CASB platform, overseeing configuration, policy management, API integrations, troubleshooting, and ongoing operational support.
Security Policy Management: Configure, maintain, and optimize data loss prevention (DLP), anomaly detection, user activity monitoring, tenant restrictions, and cloud application control policies.
Security Platform Integration: Maintain and enhance integrations with identity providers, SIEM/SOAR platforms, email security solutions, and endpoint security tools to support coordinated threat detection and response.
SASE and SSE Migration: Provide technical guidance and hands-on support for CASB migration initiatives, including transitions from Skyhigh to Palo Alto SASE, SSE, and SaaS security solutions.
Deployment and Optimization: Monitor existing security deployments, improve platform performance, and participate in phased implementations and rollouts under the guidance of principal and lead engineers.
Automation and Operational Efficiency: Develop and maintain automation for configuration management, validation, reporting, and recurring operational tasks.
Technical Documentation: Create and maintain accurate technical diagrams, standard operating procedures, user guides, runbooks, and other operational documentation.
Infrastructure Implementation: Collaborate with internal engineering teams and external customer stakeholders to design, implement, and support enterprise security infrastructure.
Incident Response and Escalation: Investigate technical issues, manage escalations, assess potential solutions, and implement corrective measures to maintain service reliability and security.
Technical Leadership and Mentorship: Share expertise, provide technical guidance, and mentor less-experienced team members when needed.
Resource Coordination: Coordinate the acquisition and deployment of required hardware, software, and subcontractor services to support project delivery.
Operational Support: Participate in on-call rotations as required by management and customer needs, helping maintain the availability and effectiveness of enterprise security services.
Requirements:
Education: Bachelor's degree or equivalent professional experience.
Professional Experience: At least five years of experience working with Cloud Access Security Broker (CASB) solutions.
Core Technical Expertise: Strong hands-on experience with Skyhigh CASB and Palo Alto SaaS security, SASE, or SSE technologies.
Enterprise Security Knowledge: Understanding of enterprise network security, cloud application controls, data loss prevention, identity integrations, endpoint security, and security monitoring.
Migration and Integration Skills: Experience supporting security platform migrations, integrating enterprise security tools, and maintaining complex security configurations in large, multi-tenant environments.
Automation and Troubleshooting: Ability to automate configuration and reporting tasks, diagnose complex technical problems, and implement effective solutions.
Documentation Skills: Strong documentation practices, including the ability to develop technical procedures, architectural diagrams, operational guides, and runbooks.
Communication and Presentation: Excellent written and verbal communication skills, with demonstrated experience delivering technical presentations and briefings to audiences at different organizational levels.
Collaboration and Leadership: Ability to work independently and collaboratively, coordinate with cross-functional teams, communicate effectively with customers, and mentor colleagues when appropriate.
Security Certification: Must possess or be able to obtain an applicable intermediate Department of War (DoW) 8140 or DoW 8570 certification within six months of hire. Examples include Security+ CE, CySA+, or an equivalent qualification.
Security Clearance: Must be able to obtain and maintain a Secret security clearance.
Citizenship: U.S. citizenship is required.
Work Arrangement: Ability to work remotely within the United States, participate in required on-call rotations, and travel approximately 10–25% as needed.
Benefits:
Annual Salary: $170,144–$201,250, depending on experience, geographic location, and applicable contractual requirements. Actual compensation may fall outside this range.
Employment Type: Full-time position, with a standard schedule of 40 hours per week.
Remote Work: Fully remote opportunity available across the United States.
Flexible Work Arrangements: Full-flex workweek options, where available, to support work-life balance.
Healthcare Coverage: Multiple medical plan options, including plans with Health Savings Accounts (HSAs), as well as dental and vision insurance.
Retirement Benefits: 401(k) plan with employer matching contributions.
Paid Time Off: Typically 15 days of paid leave per calendar year for eligible new employees, prorated according to the start date.
Paid Holidays: Typically 10 paid holidays annually, subject to applicable eligibility and proration.
Additional Leave: Access to eligible vacation, sick, personal, military, bereavement, jury duty, and parental leave benefits.
Paid Family Leave: Eligible employees may receive up to 160 hours of paid family leave within a rolling 12-month period.
Income Protection: Short-term and long-term disability coverage, life insurance, accidental death and dismemberment coverage, and other insurance options.
Professional Development: Paid education, certification opportunities, and resources to expand technical expertise.
Career Growth: Access to internal mobility resources and opportunities for professional advancement.
Advanced Technology Exposure: Opportunities to work with technologies such as Palo Alto Networks, Juniper, Illumio, Gigamon, ExtraHop, F5, and AlgoSec.
Travel: Approximately 10–25% travel may be required.