Zscaler Security Engineer
Send a job offer directly to this candidate
Strategic Network Planning, Network Design and Implementation, Route/switch Configuration, Deployment & Support. Complex local-area network design, Requirements determination and analysis, Network Management and Project Management expertise. Specializing in planning with in-depth analyses of network infrastructures, design of new local and wide area networks utilizing TCP/IP, IPX, and SNA protocols, and implementation of multiple networks with project management and complete documentation.
Zscaler Security Engineer - Experis - Plano, TX
(2024-07)
For a large Insurance firm, current role includes design and support ZPA solutions. This includes Scaling and Supporting growth using CBI for M&A and Microtenants. Also, deployments of additional ZCC Clients, Applications Connectors and PSE for DR.
Daily troubleshooting and problem-solving involving ITSM updates. A well rounded background in ZIA, ZDX, networking, firewall, load balancing and Cloud services allow a resourcefulness for applications MACs. Conveying technical details in an understandable manner to non-technical stakeholders are also daily tasks.
Active listening and accurately interpreting needs and concerns are also required skills for current role.
Principle Zscaler Cyber Security Engineering - Ultra Violet Cyber - Plano, TX
(2024-02 - 2024-07)
Develop and enhance Zscaler deployment standards and best practices and troubleshooting procedures for level 2 and Operations. Collaborate with other Network Architects to convey Zscaler requirements for optimization and new platform solutions. Examples include Zscaler Client Connector (ZCC) deployment phases and Cloud and branch Connectors. Customize client implementation for ZDX, ZIA and ZPA.
Vice President Cyber Security Engineering SASE - Citi - Plano, TX
(2024-02 - 2024-03)
Planning, Architecting and Engineering for early phase Zscaler platforms conversion. Enterprise moving from on premise proxy and always on VPN to Cloud proxy ZIA SASE and remote access to internally hosted applications and SIPA with ZPA. Monitoring End-to-End user experience with ZDX. Designed and wrote a training program for L2/L3 Operations.
Principal Consultant - Infosys Public Services - Plano, TX
(2022-07 - 2023-07)
Support and deliver solutions for a Zscaler PoC- before Enterprise deployment for a DoD client. Zscaler ZIA, ZPA, ZDX and Virtual Private Service Edge for ZPA are included. User clients including Windows, MAC, iOS and Android are also part of the client engagement. A Zero Trust environment is the client overall goal.
Cyber Security Engineer - Black Lake Security - Plano, TX
(2022-03 - 2022-07)
Supported and delivered solutions for a Zscaler PoC. The goal was augmenting client VPN remote access with the Zscaler Private Access with a Zero Trust Network Access emphasis. Zscaler ZIA replacing client proxy access as well in PoC with clients including Windows, MAC and iOS. This PoC was for a large Financial Services firm.
Senior Associate Engineer - Fannie Mae - Plano, TX
(2017-03 - 2022-03)
Support and deliver solutions in the DMZ space. Primary capacity is Lead Engineer for the Zscaler Cloud Proxy and directing activities of a team that includes contractors and vendor. Currently augmenting client VPN remote access with the Zscaler Private Access for a Zero Trust path.
Preparing for on premises Service Edge hosting to separate server from client proxy access. Moreover, the additional bandwidth with a data center geolocated server edge is meant to assure unimpacted business processes such that consumption doesn't impede business functions.
Network Planning Engineer - Comerica Bank - Auburn Hills, MI
(2015-02 - 2017-03)
On the External Communications Network Engineering team, contributed to Moves Adds and Changes with respect to the network edge. This includes Firewalls, edge switches, load balancers remote user VPN and Proxies. Firewalls include Checkpoint, Cisco and Juniper. Involved with most all Site-to-Site VPNs either new or conversions from legacy platform. Switches include Cisco IOS and NXOS. Remote VPN is Juniper and Proxy is bluecoat. Day to day changes and platform upgrades are included in effort.
Senior Network Engineer - Ascension Information Services - FT Warren, MI
(2014-03 - 2015-02)
Provide networking and security services that include 54 Checkpoint Firewalls and Bluecoat proxy. Configure Site-to-Site VPNs for remote offices in St John Providence network and B2B with partners. Converting/Upgrading from single point of failure firewalls to HA clusters.
Senior Network Engineer - CareTech Solutions FT - Troy, MI
(2013-08 - 2014-03)
Provide networking and security services that include Cisco Firewalls and Nexus platform switching. Configure/Support Cisco ASA (5585,5510, 5520, 5515, 5525), Cisco 7k, 5k and 2k client shared ASA context and VRF environments. Also configure changes/deploy 6500s, 3750s, 3550s switch/router infrastructure with OSPF, EIGRP, BGP.
Cisco DCNM LAN. Scripted the conversion of IP Address Management from an XL spreadsheet into Infoblox Grid Manager. LAN/WAN manage via SolarWinds Orion that includes NPM, NCM and IVM.
Senior Network Engineer/Architect - Learning Care Group - Novi, MI
(2012-05 - 2013-08)
Provide networking, architect and security services. Configure/Support Cisco ASA (5510, 5520, 5515, 5525), Cisco ACE (4710)/CSS (11501) and F5 load balancers (3900, 2200) for the client web hosted environments. Also configure changes/deploy 6500s, 3750s, 3550s, SOHOs switch/router infrastructure with OSPF, EIGRP, BGP.
Refreshed for HA firewalls and Edge routers. Collect applications requirements from Project Managers, developers and stakeholders then engineer network solutions and configurations. Developing DR plan between data centers.
Planning IDS/IPS for deployment. Support/deploy WAN solutions to nearly 1000 remote locations across the country. LAN/WAN manage via SolarWinds Orion that includes NPM, SAM, NCM, IPAM, NTA, UDT and IVM.
LEM to be installed next, license already acquired.
Senior Network Engineer - AAA Life Insurance - Livonia, MI
(2010-11 - 2012-05)
Deployed RSA 250s for two factor VPN authentication as part of PCI 2.0. Review configurations with peers and perform changes during appropriate change windows under strict change control criteria. Collect applications requirements from Project Managers, developers and stakeholders then engineer network solutions and configurations. LAN/WAN manage via SolarWinds Orion that includes NPM, SAM, NCM, IPAM, NTA, and IVM.
Senior Network Engineer - EDS/HP Enterprise Services - Auburn Hills, MI
(2007-07 - 2010-11)
Provide networking and security services following QMS standards and practices. Configure Checkpoint on NOKIA, F5 and Cisco load balancers for the Global Web Hosting environment. Collect applications requirements from Project Managers and stakeholders then engineer network solutions and configurations. Review configurations with Operations technicians that perform configurations during applicable data center windows.
Senior Network Engineer - MCI Professional Services - Sterling Heights, MI
(2002-11 - 2007-07)
Provide level 2 and level 3 support services for Web Content Switched portal and public web hosting in eBusiness Operations and Planning. Caching, Routing, Load Balancing and Performance Analysis services for Big Three Auto maker. Infrastructure includes Cisco 6509s, CSSs, Nortel routers, Alteons and 450 switches and Network Appliance Netcaches.
Extranet Engineering and Support Team Member - Siemens Business Services - Dearborn, MI
(2002-05 - 2002-11)
Provide Firewall, Caching, Routing, and Performance Analysis services for Big Three Auto maker. Specifically assigned to support the B2C and B2X environments that include Web Content Switching, Appliance Servers, Proxies and Caches. Infrastructure includes Nokia HA and clusters, 6509s, CSMs, CSSs.
Contract Trainer and Consultant - LP8, Inc - Jacksonville, Florida
(2001-01 - 2002-03)
Deliver classes in MPLS/VPN, BGP, and Broadband Cable. Cisco course development experience focused on SONET and POS with respect to the optical portion Cisco's e-learning training. Complete training repertoire include CID, BCMSN, BSCN, ICND, AMVS, CBCR.
Bachelor in Science - Computer Information Systems - Madonna University (1997)
