Network Security Specialist Senior (SWG)

Location: Hybrid, three days per week in Cincinnati, Ohio (preferred) or Atlanta, Georgia; candidates must be US Citizens or Green Card Holders.

Company

hirify.global provides payment technology and operates large-scale global enterprise security environments.

What you will do

• Lead the Secure Access and Zero Trust transformation across SASE, SWG, Proxy, and related network security services.
• Own the architecture, engineering, and continuous improvement of Zscaler ZIA/ZPA and Palo Alto Panorama, NGFW, Threat Prevention, and Prisma Access platforms.
• Design and optimize controls for internet access, private application access, SSL inspection, traffic steering, threat prevention, and Zero Trust access.
• Improve reliability through standardization, tuning, automation, telemetry, SIEM integration, and performance metrics.
• Lead change management, rollout planning, validation, risk mitigation, rollback readiness, and post-implementation reviews.
• Act as the senior escalation point for major incidents, mentor engineers, and collaborate with security, infrastructure, cloud, application, operations, and vendor teams.

Requirements

• Bachelor's degree in a related field and 12+ years of experience, or equivalent practical experience.
• Deep hands-on expertise with Zscaler, including ZIA, ZPA, SWG, Proxy, SASE, SSL inspection, traffic steering, and Zero Trust deployments.
• Strong experience with Palo Alto Panorama, NGFW, Threat Prevention, Prisma Access, and cloud-delivered security services.
• Expert knowledge of TCP/IP, TLS, DNS, routing, NAT, certificates, identity-aware access, cloud networking, and Zero Trust principles.
• Experience leading large-scale security initiatives, setting technical direction, managing major incidents, and improving operational maturity.
• US citizenship or Green Card required; visa sponsorship is not available now or in the future.

Nice to have

• Automation and Infrastructure-as-Code experience with Terraform, Python, APIs, Git, and CI/CD pipelines.
• Experience with WAF technologies such as Akamai, Cloudflare, or F5 Distributed Cloud.
• Cloud-native and hybrid security architecture experience across multi-cloud environments.
• Advanced certifications such as ZCCA, ZCCP, PCNSE, CISSP, CCSP, or GIAC.

Culture & Benefits

• Hybrid work with regular office presence in Cincinnati or Atlanta.
• Rotating on-call schedule for secure access, proxy, SASE, and network security incidents.
• Weekday and weekend coverage is shared across rotating colleagues.
• Equal opportunity employment and reasonable workplace accommodations.