Network Engineer Expert

This position is listed on behalf of a partner company, which manages all applications and next steps. Our partner is looking for a Network Engineer Expert based in the United States. The Network Engineer Expert will play a critical role in designing, implementing, and maintaining enterprise network security services across complex, multi-tenant environments. This position focuses on Cloud Access Security Broker (CASB) technologies, Secure Access Service Edge (SASE), Security Service Edge (SSE), and cloud application protection. You will serve as a technical authority for Skyhigh CASB, managing security policies, data loss prevention, integrations, and operational performance while supporting migrations to next-generation security platforms. Working alongside principal engineers, technical specialists, and customer teams, you will help deliver secure, scalable, and reliable infrastructure solutions. The role combines hands-on engineering, automation, technical troubleshooting, and mentorship within a fast-paced, mission-focused environment. This fully remote opportunity is ideal for an experienced network security professional who enjoys solving complex technical challenges and strengthening enterprise cybersecurity capabilities.

CASB Platform Administration: Serve as the primary administrator and subject matter expert for the Skyhigh CASB platform, overseeing configuration, policy management, API integrations, troubleshooting, and ongoing operational support. Security Policy Management: Configure, maintain, and optimize data loss prevention (DLP), anomaly detection, user activity monitoring, tenant restrictions, and cloud application control policies. Security Platform Integration: Maintain and enhance integrations with identity providers, SIEM/SOAR platforms, email security solutions, and endpoint security tools to support coordinated threat detection and response. SASE and SSE Migration: Provide technical guidance and hands-on support for CASB migration initiatives, including transitions from Skyhigh to Palo Alto SASE, SSE, and SaaS security solutions. Deployment and Optimization: Monitor existing security deployments, improve platform performance, and participate in phased implementations and rollouts under the guidance of principal and lead engineers. Automation and Operational Efficiency: Develop and maintain automation for configuration management, validation, reporting, and recurring operational tasks. Technical Documentation: Create and maintain accurate technical diagrams, standard operating procedures, user guides, runbooks, and other operational documentation. Infrastructure Implementation: Collaborate with internal engineering teams and external customer stakeholders to design, implement, and support enterprise security infrastructure. Incident Response and Escalation: Investigate technical issues, manage escalations, assess potential solutions, and implement corrective measures to maintain service reliability and security. Technical Leadership and Mentorship: Share expertise, provide technical guidance, and mentor less-experienced team members when needed. Resource Coordination: Coordinate the acquisition and deployment of required hardware, software, and subcontractor services to support project delivery. Operational Support: Participate in on-call rotations as required by management and customer needs, helping maintain the availability and effectiveness of enterprise security services. Requirements: Education: Bachelor's degree or equivalent professional experience. Professional Experience: At least five years of experience working with Cloud Access Security Broker (CASB) solutions. Core Technical Expertise: Strong hands-on experience with Skyhigh CASB and Palo Alto SaaS security, SASE, or SSE technologies. Enterprise Security Knowledge: Understanding of enterprise network security, cloud application controls, data loss prevention, identity integrations, endpoint security, and security monitoring. Migration and Integration Skills: Experience supporting security platform migrations, integrating enterprise security tools, and maintaining complex security configurations in large, multi-tenant environments. Automation and Troubleshooting: Ability to automate configuration and reporting tasks, diagnose complex technical problems, and implement effective solutions. Documentation Skills: Strong documentation practices, including the ability to develop technical procedures, architectural diagrams, operational guides, and runbooks. Communication and Presentation: Excellent written and verbal communication skills, with demonstrated experience delivering technical presentations and briefings to audiences at different organizational levels. Collaboration and Leadership: Ability to work independently and collaboratively, coordinate with cross-functional teams, communicate effectively with customers, and mentor colleagues when appropriate. Security Certification: Must possess or be able to obtain an applicable intermediate Department of War (DoW) 8140 or DoW 8570 certification within six months of hire. Examples include Security+ CE, CySA+, or an equivalent qualification. Security Clearance: Must be able to obtain and maintain a Secret security clearance. Citizenship: U.S. citizenship is required. Work Arrangement: Ability to work remotely within the United States, participate in required on-call rotations, and travel approximately 10–25% as needed. Benefits: Annual Salary: $170,144–$201,250, depending on experience, geographic location, and applicable contractual requirements. Actual compensation may fall outside this range. Employment Type: Full-time position, with a standard schedule of 40 hours per week. Remote Work: Fully remote opportunity available across the United States. Flexible Work Arrangements: Full-flex workweek options, where available, to support work-life balance. Healthcare Coverage: Multiple medical plan options, including plans with Health Savings Accounts (HSAs), as well as dental and vision insurance. Retirement Benefits: 401(k) plan with employer matching contributions. Paid Time Off: Typically 15 days of paid leave per calendar year for eligible new employees, prorated according to the start date. Paid Holidays: Typically 10 paid holidays annually, subject to applicable eligibility and proration. Additional Leave: Access to eligible vacation, sick, personal, military, bereavement, jury duty, and parental leave benefits. Paid Family Leave: Eligible employees may receive up to 160 hours of paid family leave within a rolling 12-month period. Income Protection: Short-term and long-term disability coverage, life insurance, accidental death and dismemberment coverage, and other insurance options. Professional Development: Paid education, certification opportunities, and resources to expand technical expertise. Career Growth: Access to internal mobility resources and opportunities for professional advancement. Advanced Technology Exposure: Opportunities to work with technologies such as Palo Alto Networks, Juniper, Illumio, Gigamon, ExtraHop, F5, and AlgoSec. Travel: Approximately 10–25% travel may be required.