Professional Services Consultant (Zero Trust)

Location: Hybrid, with available locations in Austin, TX; New York, NY; Washington DC; and San Francisco Bay Area. Monday–Friday, 09:00–18:00; occasional weekend customer support may be required. Travel is expected around 30%.

Annual salary: $163,000–$224,000 for SF, SJ, and Bay Area Metro hires; $156,000–$215,000 for California Remote, DC Metro, New York City, and NY Metro hires; $142,000–$195,000 for Colorado, plus a variable compensation target of $14,200–$19,500.

Company

hirify.global operates a global network that protects and accelerates Internet applications and provides Zero Trust security services for customers ranging from individual bloggers to Fortune 500 companies.

What you will do

• Plan and deliver customer implementation, migration, onboarding, and transition services for complex Zero Trust and SASE solutions.
• Gather business and technical requirements and produce solution designs, HLDs, LLDs, databuilds, procedures, scripts, test plans, drawings, deployment plans, migration plans, and as-builts.
• Implement hirify.global environment changes and guide customers through configuration of identity providers, endpoints, MDM, DNS, network on-ramps, and SIEM integrations.
• Troubleshoot implementation and connectivity issues and drive technical escalations with Customer Support, Engineering, and other teams.
• Lead multi-workstream engagements, support pre-sales scoping and solution design, and act as the senior technical owner for complex deployments.
• Build reusable templates, automation scripts, procedures, workflows, and documentation while mentoring junior consultants.

Requirements

• 3+ years in customer-facing technical implementation, onboarding, security engineering, security operations, or another highly technical team, including 3+ years focused on Zero Trust or SASE.
• Strong command of the OSI model and TCP/IP, TLS including TLSv1.3 and mTLS, DNS, and HTTP/2.
• Deep understanding of ZTNA, SWG, RBI, DLP, CASB, and Cloud Email Security.
• Experience with forward and reverse proxies, content filtering, DLP, sandboxing, firewalls and NGFWs, WAF, bot management, rate limiting, and SSL/IPsec and SSL/TLS VPN appliances and services.
• Hands-on identity integration experience with SAML, OIDC, SCIM, LDAP/Active Directory, MFA/FIDO2, and Microsoft Entra ID, Okta, or Ping.
• In-depth DNS knowledge, including DNS filtering, DoH/DoT, conditional forwarding, split-DNS, internal-zone resolution, and local domain fallback.
• Hands-on software distribution and deployment across Windows, macOS, and Linux; Windows and Linux server administration; and troubleshooting of client endpoints on all three platforms.
• Experience debugging network connectivity with packet capture and DNS/HTTP tracing tools.
• Ability to manage projects, meet deadlines, prioritize competing demands, and work in English. Fluency in Spanish or Portuguese is a strong advantage.

Nice to have

• Terraform, REST APIs, Python or Bash scripting, Git, CI/CD, and policy-as-code.
• AWS, Azure, or GCP networking, cloud-native DNS, cloud IAM, and IaaS connector deployment.
• IPsec/GRE, BGP, Anycast, Zero Trust network segmentation, SD-WAN, MPLS, or WAN optimization experience.
• Intune, Jamf, Active Directory, GPO, Entra ID, and identity or directory tooling.
• Logpush, SIEM integrations such as Splunk, Microsoft Sentinel, Elastic, or Chronicle, and Digital Experience Monitoring.
• NIST Zero Trust Architecture and compliance experience with GDPR, DORA, NIS2, ISO 27001, PCI DSS, HIPAA, SOC 2, or FedRAMP.
• CISSP, CCSP, SC-300, AZ-500, AWS Security Specialty, CCNP/CCIE, CompTIA, or equivalent certifications; forensic certifications are welcome.
• AI security or shadow-AI governance, including AI-tool discovery, gating, and AI Gateway concepts.

Culture & Benefits

• Hybrid work with U.S.-based location options and approximately 30% travel.
• Employees receive medical, dental, vision, flexible spending, commuter, fertility and family-forming, mental health, and global travel medical benefits.
• Financial benefits include disability, life and accident insurance, 401(k), and employee stock participation.
• Flexible paid time off covers vacation and sick leave, with parental, pregnancy health, medical, and bereavement leave programs.
• The role is eligible for variable compensation and participation in hirify.global’s equity plan.
• Applicants reaching the offer stage may be asked to attend an in-person interview at a hirify.global office or hub.

Hiring process

• Applicants progressing to the offer stage may need to attend an in-person interview at a hirify.global office or hub.
• Any offer may depend on authorization to receive software or technology controlled under U.S. export laws without sponsorship for an export license.