Lead Security Engineering
Role Summary
The Lead – Network Security is responsible for leading the design, implementation, and operation of enterprise network security controls with a primary focus on Fortinet Next-Generation Firewalls and the Zscaler cloud security platform. This role provides technical leadership and hands-on expertise to ensure secure, resilient, and compliant network connectivity across on-premises, cloud, and remote access environments.
The role acts as a platform owner and technical authority for network security services, partnering closely with Network Engineering, Cloud, IAM, SOC, and GRC teams to embed security-by-design while enabling business agility.
Key Responsibilities
Network Security Platform Ownership
- Own and lead enterprise network security platforms including Fortinet NGFW (FortiGate) and Zscaler (ZIA / ZPA)
- Define architecture standards, design patterns, and security guardrails for perimeter, internal, and cloud connectivity
- Lead firewall and SASE design for data centers, cloud workloads, and remote users
- Ensure high availability, scalability, and resilience of network security services
Firewall Engineering & Operations (Fortinet)
- Lead design, deployment, and lifecycle management of Fortinet firewalls, policies, NAT rules, IPS, URL filtering, and SSL inspection
- Review, approve, and optimize firewall rules to enforce least privilege and segmentation
- Drive firewall hygiene initiatives including rule recertification, cleanup, and risk reduction
- Support upgrades, patching, and vulnerability remediation for firewall platforms
Cloud Security & Secure Access (Zscaler)
- Lead implementation and operations of Zscaler Internet Access (ZIA) and Zscaler Private Access (ZPA)
- Define secure internet access, zero-trust access, and remote connectivity models
- Integrate Zscaler with identity platforms (e.g., Entra ID / SSO) and endpoint controls
- Monitor and tune policies to protect against web-based threats, data exfiltration, and misuse
Threat Protection, Incident Support & Compliance
- Integrate firewall and Zscaler telemetry with SOC and SIEM platforms for monitoring and incident response
- Support investigation and containment of network-based security incidents
- Ensure network security controls align with regulatory and compliance requirements (HIPAA, NIST, ISO)
- Provide technical inputs for audits, risk assessments, and security architecture reviews
Leadership, Governance & Continuous Improvement
- Provide technical leadership and mentorship to network security engineers
- Define operational runbooks, standards, and documentation for network security services
- Drive automation, process optimization, and platform maturity improvements
- Act as an escalation point for complex network security issues and design decisions
Required Skills & Experience
- 5–8+ years of experience in network security or security engineering roles
- Strong hands-on expertise with Fortinet firewalls (FortiGate, FortiManager, FortiAnalyzer)
- Strong hands-on experience with Zscaler ZIA and ZPA platforms
- Solid understanding of NGFW, IPS/IDS, VPNs, segmentation, zero trust, and SASE concepts
- Experience securing hybrid environments (on-premises, cloud, remote workforce)
- Strong troubleshooting, documentation, and stakeholder communication skills
Preferred Qualifications
- Experience in healthcare or other highly regulated environments
- Fortinet certifications (NSE 4 / NSE 7 or equivalent)
- Zscaler certifications (ZIA / ZPA)
- Experience integrating network security platforms with SIEM/SOC and IAM systems
Key Success Metrics
- Stable and secure operation of Fortinet and Zscaler platforms
- Reduction in network-related security incidents and policy violations
- Improved firewall rule hygiene and access control effectiveness
- High availability and performance of secure access services
- Strong partner satisfaction from IT, Cloud, and Security stakeholders
