The Role

Results-driven Network Security Engineer specializing in modernizing enterprise security architectures through large-scale cloud proxy and SASE migrations. Recognized for bridging legacy on-premises web gateways to cloud-native security platforms like Zscaler (ZIA/ZPA), while maintaining robust next-generation firewall engineering, deep packet troubleshooting, and strict ITIL-aligned change management.

Key Responsibilities

- Migration Strategy & Execution: Architected and executed seamless end-to-end migrations from legacy secure web gateways (SWG) to cloud security service edge (SSE) platforms, managing policy analysis, translation, and phased site-by-site cutovers.
- Policy Transformation: Audited, re-engineered, and optimized legacy web policies—including URL categorization, deep packet SSL/TLS inspection, authentication frameworks, and bypass rules—into modern cloud-native access controls.
- Firewall & Traffic Steering Engineering: Configured and maintained enterprise firewalls (PAN-OS, Panorama, and GlobalProtect) to orchestrate secure traffic steering to cloud security platforms via dynamic GRE/IPsec tunnels, automated PAC files, and endpoint client connectors.
- Complex Diagnostics & Root Cause Analysis: Performed advanced troubleshooting across multi-vendor environments using deep packet analysis (Wireshark, tcpdump), SIEM log correlation, and real-time traffic flow tracing to resolve latency, authentication, and SSL inspection friction.
- ITIL Change & Incident Governance: Managed lifecycle operations within ServiceNow, authoring high-risk change requests, comprehensive backout plans, and presenting technical risk profiles in Change Advisory Board (CAB) forums.
- Documentation & Cross-Functional Leadership: Authored detailed operational runbooks, migration run-sheets, and as-built architectural diagrams, facilitating coordination across identity, endpoint,



and networking teams while delivering status updates to executive project leadership.

Required Qualifications

- 5+ years of dedicated experience in enterprise network security engineering.
- Advanced Palo Alto Expertise: Extensive hands-on experience deploying and managing PAN-OS, Panorama, and GlobalProtect security ecosystems.
- ITIL Change Management Maturity: Proven track record of planning, risk-assessing, and executing infrastructure changes within ServiceNow in high-availability enterprise environments.
- Advanced Diagnostics: Deep technical proficiency in packet capture analysis, log parsing, traffic flow troubleshooting, and structured root-cause investigation.
- Core Networking & Security Fundamentals: Comprehensive mastery of TCP/IP, dynamic routing, DNS architecture, Public Key Infrastructure (PKI), forward proxy concepts, and SSL/TLS interception mechanics.
- Communication & Collaboration: Excellent written, presentation, and interpersonal skills capable of bridging technical engineering groups with business leadership.

Preferred Qualifications

- Cloud Security Specialization: Hands-on experience with Zscaler ZIA/ZPA, SASE/SSE architecture design, and Zero Trust Network Access (ZTNA) principles.
- Identity & Access Management: Experience integrating SAML/SSO frameworks with cloud identity providers (e.g., Azure AD / Entra ID).
- Automation & Scripting: Proficiency in Python, infrastructure-as-code (Terraform), or leveraging security platform APIs for automation.
- Skilled Certifications: PCNSE, Zscaler Certifications (ZCCA/ZDTA), and ITIL Foundation.

Tools and Technologies

- Network & Security: Palo Alto Networks (PAN-OS, Panorama, GlobalProtect), Zscaler (ZIA, Client Connector), Legacy Web Gateways / Proxy architectures.
- Operations & ITSM: ServiceNow (Change, Incident, Problem Modules).
- Troubleshooting & Monitoring: Wireshark, tcpdump, Splunk (or equivalent SIEM platforms).

If you're interested, share your resume to Ellie Ardeza at [email protected] or hit apply.

📌 Mid/Snr Network Security Engineer - 6mos contract - view to extend (Sydney)
🏢 Northbridge It Recruitment Propr
📍 Sydney