Note: The job is a remote job and is open to candidates in USA. Dice is seeking a Security Network Engineer to support a Contract engagement based in San Diego, California. The role involves guiding the design and optimization of secure connectivity in a Cisco Viptela SD-WAN environment, focusing on resiliency and user experience.
Responsibilities
- Assess the current Zscaler and Cisco Viptela landscape to identify gaps, risks, and opportunities for improved secure connectivity
- Compare agent-based and tunnel-based deployment approaches, then recommend the most effective model for business, security, and operational needs
- Develop and test failover designs across multiple network circuits to reduce user disruption during provider or path changes
- Refine traffic steering and policy behavior to improve session stability and application access within the SD-WAN environment
- Preserve key identity-related data used for security enforcement and visibility, including user and device context across network flows
- Partner with internal technical teams and external service providers to implement configuration improvements and validate outcomes
- Troubleshoot complex issues involving cloud security controls, SD-WAN routing behavior, and end-user connectivity
- Produce clear technical documentation covering findings, recommended changes, and the target-state architecture
- Advise on routing, segmentation, and secure access strategies involving technologies such as BGP, Cisco routing platforms, Cisco ASA, Palo Alto Firewall, and related network security tools
Skills
- Demonstrated expertise with Zscaler Internet Access, Zscaler Client Connector, and secure tunnel deployment methods in enterprise environments
- Strong hands-on experience with Cisco Viptela SD-WAN, including path selection, resiliency planning, and failover behavior
- Deep understanding of identity-aware security policy design and the importance of maintaining user and device context across traffic flows
- Proven ability to troubleshoot integrations between cloud-delivered security platforms and complex SD-WAN architectures
- Solid background in enterprise network security, including segmentation, traffic engineering, and high-availability design
- Practical knowledge of BGP, Cisco routers, Cisco ASA, Palo Alto Firewall, and broader network security infrastructure
- Ability to provide both architecture-level guidance and detailed configuration recommendations in a consulting environment
- Relevant Zscaler or Cisco certifications are preferred
Benefits
- Benefits are available to contract/temporary professionals, including medical, vision, dental, and life and disability insurance.
- Hired contract/temporary professionals are also eligible to enroll in our company 401(k) plan.
Company Overview