Staff Cybersecurity Engineer - Zero Trust

Job Description

*This role offers the following Work strategies:*

*This role is based remotely but if you live within a 50-mile radius of Atlanta, Austin, Detroit, Mountain View or Warren, you are expected to report to that location three times a week, at a minimum*

The Role

The role serves as a member of the Secure Access Services team, providing deep network access analysis and zero trust solution design expertise. As a Staff Cybersecurity Engineer focused on Security Services, this role is responsible for assessing how users, devices, and services traverse complex network architectures and translating those findings into engineered zero trust patterns implemented through the appropriate identity-aware proxies and mesh VPN policies.

This senior individual contributor role combines strategic security architecture with hands-on engineering to deliver secure access services at scale. The engineer will own the design and implementation of secure access capabilities that offload complex identity and context-based access decisions from applications to a centralized Secure Access Services platform, covering both web and non-web applications such as APIs, databases, administrative tools, and legacy TCP workloads.

What You'll Do

• Design, implement, and maintain scalable and secure access architectures across complex enterprise IT environments.
• Define and evolve the technical roadmap for Secure Access Services, including mesh VPN and identity-aware access patterns across web and non-web applications.
• Conduct deep analysis of user, device, and service network access paths across complex network environments, including routing, firewalls, macro- and micro-segmentation, proxies, DNS, and load balancers.
• Architect end-to-end zero trust access patterns that decouple applications from direct network trust and centralize policy enforcement in Secure Access Services.
• Translate business, risk, and compliance requirements into reusable refer...