{"id":4145286,"url":"https://alion.io/job/mcgough-network-security-engineer","title":"Network Security Engineer","company":{"id":2002605,"name":"McGough","domain":"mcgough.com","url":"https://alion.io/company/mcgough","size_band":"1001-5000","is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"Workday","truth_index":{"grade":"A","score":100,"open_postings":7,"ghost_share":0,"stale_share":0,"repost_share":0,"time_to_fill_p50_days":12,"computed_at":"2026-11-11T05:49:22Z"}},"role":"Security","role_family":"Security","seniority":"junior","employment_type":"full_time","work_mode":"remote","remote_scope":"stated_countries","remote_scope_basis":"board_field","remote_working_hours":null,"hiring_geo_confidence":"structured","locations":["United States"],"countries":["US"],"hiring_countries":["US"],"hiring_countries_total":1,"salary":{"min":95000,"max":110000,"currency":"USD","period":"year","gross":null,"usd_annual":110000},"salary_estimate":null,"experience_years_min":2,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"CI/CD","optional":false},{"name":"DLP","optional":false},{"name":"DNS","optional":false},{"name":"Git","optional":false},{"name":"PowerShell","optional":false},{"name":"Python","optional":false},{"name":"Rest API","optional":false},{"name":"SIEM","optional":false},{"name":"TCP/IP","optional":false},{"name":"Terraform","optional":false},{"name":"Zero Trust","optional":false},{"name":"Zscaler","optional":false}],"status":"live","first_seen_at":"2026-11-11T00:00:00Z","employer_posted_date":"2026-11-11","last_verified_at":"2026-11-12T06:48:51Z","board_verified":true,"closed_at":null,"days_open":1,"trust":{"level":"ok","repost_count":null,"flags":[],"days_open":1},"description":"POSITION DESCRIPTION\nThe Network Security Engineer designs, implements, and operates the company’s Zscaler environment and related network security controls. This hands-on role applies zero-trust, secure access, traffic inspection, data protection, identity, cloud, and segmentation controls across enterprise users, applications, and workloads. The position partners with Network Engineering, Security Operations, Cloud Platform, Identity, Application Security, and business technology teams.\nQUALIFICATIONS\nRequired\n2+ years of network, cloud, or security engineering experience, including significant production experience with Zscaler ZIA, ZPA, and Client Connector.\nStrong knowledge of TCP/IP, routing, DNS, HTTP/S, TLS, certificates, proxies, GRE, IPsec, identity federation, device posture, CASB, and DLP.\nExperience designing secure internet, SaaS, private-application, and cloud-workload connectivity in at least one major public-cloud platform.\nExperience integrating network security platforms with identity, endpoint, certificate, SIEM, and incident-response systems.\nPreferred\nExperience with Zscaler Cloud Connector, Zero Trust Gateway, ZDX, Browser Isolation, Cloud NSS, or related Zscaler capabilities.\nExperience with Terraform, Python, PowerShell, REST APIs, Git, or CI/CD automation.\nZscaler, cloud, networking, or security certifications.\nSkills\nAdvanced troubleshooting of routing, authentication, certificates, proxies, application connectivity, traffic forwarding, and performance issues.\nAbility to translate security and connectivity requirements into practical, identity- and risk-based policies.\nStrong documentation, project ownership, communication, and cross-functional collaboration skills.\nAbility to balance security, user experience, application performance, and business needs.\nOFFICE AND TRAVEL\nWork is primarily performed in an office or remote-work environment using standard computer and collaboration tools.\nPeriodic after-hours support, on-call participation, and up to 10% travel may be required.\nRESPONSIBILITIES AND TASKS\nMain Job Duties (50% of time)\nDesign, implement, administer, and troubleshoot ZIA, ZPA, Client Connector, App Connectors, traffic forwarding, TLS inspection, secure web gateway, firewall, threat protection, CASB, and DLP controls.\nSecure employee access to internet, SaaS, and private applications using identity-, device-, risk-, and data-aware policies.\nDesign secure connectivity and segmentation for on-premises and cloud workloads, private applications, administrative services, and machine-to-machine communications.\nIntegrate Zscaler with identity, endpoint, cloud, certificate, SIEM, and incident-response platforms.\nStrategy Management (15% of time)\nDevelop and maintain the target architecture and roadmap for Zscaler, zero-trust networking, secure access, and cloud workload protection.\nPartner with business and technical stakeholders to assess user and application access, traffic and data flows, availability needs, performance, and security requirements.\nPolicy Administration (20% of time)\nDevelop, test, document, and maintain access, data-protection, traffic-inspection, segmentation, and exception policies.\nGovern internet, SaaS, and private-application access and protect source code, credentials, intellectual property, customer information, and other sensitive data.\nReporting & Analysis (10% of time)\nMonitor Zscaler logs and develop alerts for threats, sensitive-data exposure, policy bypass, anomalous traffic, and administrative changes.\nReport on platform health, traffic trends, policy effectiveness, exceptions, incidents, and remediation progress.\nOther Duties as Assigned (5% of time)\nAutomate configuration, validation, reporting, and compliance activities using APIs, scripting, or infrastructure-as-code tools.\nMaintain architecture diagrams, operational procedures, troubleshooting guides, and incident-response runbooks.\nPHYSICAL REQUIREMENTS\nThe physical requirements listed here are representative of those that must be met by an employee to successfully perform the essential functions of this job. Reasonable accommodations may be made to enable individuals with disabilities to perform the essential functions.\nPosition involves sitting for extended periods of time at employee’s workstation and during meetings as well as while traveling, either by plane or car. Employee needs to be able to lift to 20 pounds as frequently as needed to move objects; dexterity to write and manipulate computer keyboard and mouse; ability to hear and speak clearly; and ability to distinguish between colors on graphs and charts.\nOccasionally, employee will be required to visit construction jobsites which may expose the employee to dirt, dust, uneven surfaces, outdoor weather conditions and extreme temperatures.\n***\nIn alignment with our commitment to pay transparency, the base salary range for this position is $95,000 to $110,000, excluding fringe benefits or potential bonuses. If you join McGough, your final base salary will be determined by several factors, including geography, location, skills, education, and experience. Furthermore, we place significant value on pay equity among our current team members as part of any final job offer.\nPlease note that the range provided above reflects the hiring range for this role. Hiring near the top end of this range would be atypical, as we aim to allow room for future salary growth. Additionally, McGough offers a comprehensive compensation and benefits package. This includes insurance coverage for medical, dental, vision, life, and disability. We also provide generous retirement plans, voluntary benefit plans, parental leave, substantial paid time off, and holiday pay.","description_format":"text","description_chars":5725,"description_truncated":false,"requirements":{"experience_years_min":2,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":null,"security_clearance":false,"languages":[]},"benefits":["Equity","Insurance coverage","Parental leave","Retirement plans"],"hiring_locations":[{"name":"United States","iso":"US","kind":"country"}],"hiring_excludes":[],"relocation_offered":false,"industries":["Network Security","Property Development","Facilities Management","Construction"],"lifecycle":[{"event":"open","at":"2026-11-12T06:48:51Z"}],"visa":[],"liveness":{"score":86,"band":"hot","label":"Hiring now","p_open":1,"p_active":0.86,"p_room":1,"age_days":1,"expected_fill_days":17,"reasons":["conf:0","win:early","comp:junior,brand"],"computed_at":"2026-11-12T07:41:57Z"},"pay":{"stated_usd_annual":110000,"is_top_pay":true},"html_url":"https://alion.io/job/mcgough-network-security-engineer","json_url":"https://alion.io/job/mcgough-network-security-engineer.json","meta":{"generated_at":"2026-11-12T07:41:57Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":15456,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-11-13T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.1,"usd":0.01,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":2002605},"rest":"https://alion.io/mcp/rest/get_company?id=2002605"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Fmcgough-network-security-engineer"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":2,"usd":0.2},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Fmcgough-network-security-engineer"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.1,"usd":0.01},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Fmcgough-network-security-engineer"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/mcgough-network-security-engineer\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Fmcgough-network-security-engineer"}],"agent":{"mcp":"https://alion.io/mcp/jobs","mcp_open":"https://alion.io/mcp/open","next":[{"tool":"get_job","arguments":{"id":4145286}},{"tool":"search_jobs","arguments":{"company":"mcgough.com","detail":"compact"}},{"tool":"match_people","arguments":{"job_id":4145286},"note":"people open to offers who fit this vacancy"}],"note":"The same data through MCP tools: https://alion.io/mcp/open needs no sign-in (compact searches, postings, people); https://alion.io/mcp with an Alion account has everything. Docs: https://alion.io/developers"}}