Role: Network Security Engineer with Palo Alto / Blue Coat to Zscaler Migration
Position Summary
We are seeking a Network Security Engineer to support and execute a migration from Symantec Blue Coat ProxySG to Zscaler Internet Access (ZIA). The role combines hands-on Palo Alto firewall engineering with migration delivery, change management, and troubleshooting across a complex security environment.
Key Responsibilities
- Plan and execute the Blue Coat to Zscaler migration, including policy analysis, translation, and phased user and site cutovers
- Review existing Blue Coat policies (URL categories, SSL interception, authentication, bypass rules) and rebuild them in ZIA
- Configure and maintain Palo Alto firewalls (policy, NAT, routing, GlobalProtect, Panorama) to support traffic steering to Zscaler (GRE/IPsec tunnels, PAC files, Zscaler Client Connector)
- Troubleshoot connectivity, SSL inspection, authentication, and performance issues across Palo Alto, Zscaler, and the legacy proxy
- Raise, plan, and implement changes through ServiceNow, including risk assessments, implementation and backout plans, and CAB participation
- Manage incidents, problems, and requests in ServiceNow and keep records accurate
- Produce runbooks, migration documentation, and as-built diagrams
- Coordinate with application owners, network, endpoint, and identity teams, and provide status updates to project leadership
Required Qualifications
- 5+ years in network security engineering
- Strong hands-on experience with Palo Alto Networks firewalls (PAN-OS, Panorama)
- Proven change management experience in an ITIL-aligned environment, including authoring and implementing changes in ServiceNow
- Strong troubleshooting skills: packet captures, log analysis, traffic flow tracing, and root cause analysis
- Solid understanding of TCP/IP, routing, DNS, proxy concepts, PKI, and SSL/TLS inspection
- Strong written and verbal communication skills
Preferred Qualifications
- Experience with Zscaler ZIA/ZPA, or with proxy migrations (Blue Coat, Forcepoint, McAfee Web Gateway)
- Familiarity with SASE/SSE architecture and zero trust principles
- Experience with SAML/SSO and Azure AD/Entra ID integration
- Scripting or automation experience (Python, APIs, Terraform)
- Certifications: PCNSE, Zscaler ZCCA/ZDTA, ITIL Foundation
Tools and Technologies
Palo Alto (PAN-OS, Panorama, GlobalProtect), Zscaler (ZIA, Client Connector), Blue Coat ProxySG, ServiceNow (Change, Incident, Problem), Wireshark/tcpdump, Splunk or similar SIEM
#J-18808-Ljbffr
Network Security Engineer employer: World Wide Technology
WWT is an exceptional employer that prioritises the well-being and professional growth of its employees, offering a comprehensive benefits package that includes health insurance, wellness programs, and competitive pay. With a strong focus on fostering a collaborative work culture, WWT provides ample opportunities for career advancement and skill development, making it an ideal workplace for those looking to make a meaningful impact in the consulting field across Australia and New Zealand.
