Lead Zero Trust Network Engineer

Depository Trust Clearing Corporation - Dallas, TX

Full-time

Dallas, TX

Credit Intermediation and Related Activities

About the position

Are you ready to explore a world of possibilities? Join our DTCC family, and you'll grow your expertise and become the best version of you. As you embark on a new journey, you'll be supported and surrounded by other professionals as you learn new skills, advance your career, and see the impact of your efforts every day. The Platform Hosting & Engineering role specializes in the development, implementation, and support of all distributed, mainframe, and network hosting services across the firm. This position is responsible for the installation, configuration, programming, and support of operating systems, complex networks, and distributed environments, deploying solutions to increase overall system reliability across the firm. The Lead Platform Engineer (Zero Trust SASE Services) provides technical leadership at the enterprise level in defining processes, technical infrastructure support, and adherence to architectural standards for the Proxy, VPN, DLP, Network Infrastructure, and other systems. This role involves analyzing and evaluating anomalous network and system activity as it relates to Network Security and Zero Trust. The engineer will be responsible for the installation and configuration of selected technologies and will collaborate with various groups and team members to design required solutions that meet DTCC standards for security, resiliency, and reusability. In addition, the Lead Engineer will provide immediate support for production issues related to areas of expertise, including zScaler Products ZIA, ZPA, and ZDX. They will also support off-hour/weekend implementations and Disaster Recovery tests as required, author system documentation and supporting documents for all Zero Trust solutions to ensure clarity of design, and deliver targeted business outcomes by participating in the technical decision-making process. The role requires monitoring metrics to ensure system performance meets requirements and ensuring alignment to the governance, standards, and best practices established by DTCC. The engineer will assist with training other employees periodically and align risk and control processes into day-to-day responsibilities to supervise and mitigate risk.

Responsibilities

• Analyze and evaluate anomalous network and system activity as it relates to Network Security and Zero Trust.
• Responsible for the installation and configuration of selected technologies.
• Collaborate with various groups and team members to design required solutions that meet DTCC standards for security, resiliency, and reusability.
• Provide immediate support for production issues related to areas of expertise: zScaler Products ZIA, ZPA, and ZDX.
• Support off-hour/weekend implementation and Disaster Recovery tests as required.
• Author system documentation and supporting documents for all Zero Trust solutions to ensure clarity of design to minimize future maintenance costs.
• Deliver targeted business outcomes by participating in the technical decision-making process.
• Analyze changing business requirements to resolve impact and optimal solution regarding defining the future state technical architecture.
• Follow established DTCC requirements, principles, and models that guide technology decisions for the enterprise.
• Monitor metrics to ensure system performance meets requirements.
• Ensure alignment to the governance, standards, and best practices established by DTCC.
• Ensure delivered solutions enable infrastructure agility, scalability, and resilience to support required product needs throughout the product lifecycle.
• Assist with training other employees on a periodic basis.
• Align risk and control processes into day-to-day responsibilities to supervise and mitigate risk.

Requirements

• Minimum of 6 years of related experience.
• Bachelor's degree preferred.
• Expertise in Zero Trust Network Access (ZTNA), with a strong preference for implementing zScaler solutions.
• Expertise Layer 1-7 knowledge.
• Demonstrable experience in implementing and handling Zero Trust Security Models.
• Familiarity with Identity and Access Management (IAM), Role Based Access Control (RBAC), and multi-factor authentication systems (MFA).
• Experience with Network Security Migration from Legacy Proxy/Firewall Infrastructure to zScaler Zero Trust solution would be a plus.
• Strong knowledge of TCP/IP, HTTP, FTP, cookies, authentication, web filtering, virus scanning, web servers, SSL/encryption, and reporting packages.
• The ability to use scripting languages.
• PAC file experience is required.
• Complete SSL Interception with an integrated internal environment.
• Assist in monitoring, configuration changes, and software updates.
• Analyze and evaluate anomalous network and system activity.
• Experience with the management of public SSL certificates.

Benefits

• Competitive compensation, including base pay and annual incentive.
• Comprehensive health and life insurance and well-being benefits, based on location.
• Retirement benefits.
• Paid Time Off and other leave of absence.
• Flexible/hybrid model of 3 days onsite and 2 days remote (Onsite Tuesdays, Wednesdays and a third day of your choosing).