Security Network Engineer

Job title: Security Network Engineer

About the Role Security Network Engineer to support a Contract engagement based in San Diego, California. This role will guide the design and optimization of secure connectivity across a Cisco Viptela SD-WAN environment integrated with Zscaler, with a strong focus on resiliency, user experience, and identity-aware traffic handling. The ideal consultant will bring advanced technical judgment, help shape architecture decisions, and work closely with internal stakeholders to strengthen network security performance during failover and routing events.

What You'll Do

• Assess the current Zscaler and Cisco Viptela landscape to identify gaps, risks, and opportunities for improved secure connectivity.
• Compare agent-based and tunnel-based deployment approaches, then recommend the most effective model for business, security, and operational needs.
• Develop and test failover designs across multiple network circuits to reduce user disruption during provider or path changes.
• Refine traffic steering and policy behavior to improve session stability and application access within the SD-WAN environment.
• Preserve key identity-related data used for security enforcement and visibility, including user and device context across network flows.
• Partner with internal technical teams and external service providers to implement configuration improvements and validate outcomes.
• Troubleshoot complex issues involving cloud security controls, SD-WAN routing behavior, and end-user connectivity.
• Produce clear technical documentation covering findings, recommended changes, and the target-state architecture.
• Advise on routing, segmentation, and secure access strategies involving technologies such as BGP, Cisco routing platforms, Cisco ASA, Palo Alto Firewall, and related network security tools.
• Demonstrated expertise with Zscaler Internet Access, Zscaler Client Connector, and secure tunnel deployment methods in enterprise environments.
• Strong hands-on experience with Cisco Viptela SD-WAN, including path selection, resiliency planning, and failover behavior.
• Deep understanding of identity-aware security policy design and the importance of maintaining user and device context across traffic flows.
• Proven ability to troubleshoot integrations between cloud-delivered security platforms and complex SD-WAN architectures.
• Solid background in enterprise network security, including segmentation, traffic engineering, and high-availability design.
• Practical knowledge of BGP, Cisco routers, Cisco ASA, Palo Alto Firewall, and broader network security infrastructure.
• Ability to provide both architecture-level guidance and detailed configuration recommendations in a consulting environment.

Nice to Have

• Relevant Zscaler or Cisco certifications are preferred.

Compensation & Benefits

• Salary: USD 57 - 66 per hour
• Benefits available to contract/temporary professionals, including medical, vision, dental, life and disability insurance; eligibility for 401(k).