Role: Network Security Engineer with Palo Alto / Blue Coat to Zscaler Migration

Position Summary

We are seeking a Network Security Engineer to support and execute a migration from Symantec Blue Coat ProxySG to Zscaler Internet Access (ZIA). The role combines hands-on Palo Alto firewall engineering with migration delivery, change management, and troubleshooting across a complex security environment.

Key Responsibilities

- Plan and execute the Blue Coat to Zscaler migration, including policy analysis, translation, and phased user and site cutovers
- Review existing Blue Coat policies (URL categories, SSL interception, authentication, bypass rules) and rebuild them in ZIA
- Configure and maintain Palo Alto firewalls (policy, NAT, routing, GlobalProtect, Panorama) to support traffic steering to Zscaler (GRE/IPsec tunnels, PAC files, Zscaler Client Connector)
- Troubleshoot connectivity, SSL inspection, authentication, and performance issues across Palo Alto, Zscaler, and the legacy proxy
- Raise, plan, and implement changes through ServiceNow, including risk assessments, implementation and backout plans, and CAB participation
- Manage incidents, problems, and requests in ServiceNow and keep records accurate
- Produce runbooks, migration documentation, and as-built diagrams
- Coordinate with application owners, network,



endpoint, and identity teams, and provide status updates to project leadership

Required Qualifications

- 5+ years in network security engineering
- Strong hands-on experience with Palo Alto Networks firewalls (PAN-OS, Panorama)
- Proven change management experience in an ITIL-aligned environment, including authoring and implementing changes in ServiceNow
- Robust troubleshooting skills: packet captures, log analysis, traffic flow tracing, and root cause analysis
- Solid understanding of TCP/IP, routing, DNS, proxy concepts, PKI, and SSL/TLS inspection
- Strong written and verbal communication skills

Preferred Qualifications

- Experience with Zscaler ZIA/ZPA, or with proxy migrations (Blue Coat, Forcepoint, McAfee Web Gateway)
- Familiarity with SASE/SSE architecture and zero trust principles
- Experience with SAML/SSO and Azure AD/Entra ID integration
- Scripting or automation experience (Python, APIs, Terraform)
- Certifications: PCNSE, Zscaler ZCCA/ZDTA, ITIL Foundation

Tools and Technologies

Palo Alto (PAN-OS, Panorama, GlobalProtect), Zscaler (ZIA, Client Connector), Blue Coat ProxySG, ServiceNow (Change, Incident, Problem), Wireshark/tcpdump, Splunk or similar SIEM

📌 Network Security Engineer (Australia)
🏢 World Wide Technology
📍 Australia