Job description

We are seeking an Access and Edge Network Engineer to operate and evolve a large estate of remote access VPN, on-premises firewalls, network access control (ISE), and micro-segmentation (Guardicore) infrastructure across campus and data center environments. This is a hands-on role managing the technologies that control how users, devices, and workloads connect to and traverse the network. Key Responsibilities: Manage and operate a large-scale remote access VPN environment for a distributed workforce. Administer on-premises firewalls (Fortinet and Palo Alto) across campus and data center locations, including policy management and rule lifecycle. Administer Cisco ISE. Deploy and manage Guardicore micro-segmentation to enforce workload-level security policies in the data center. Operate Zscaler (ZIA, ZPA) for secure internet access and zero-trust private application connectivity. Operate Prisma for for secure internet access and zero-trust private application connectivity. Troubleshoot complex connectivity and access issues spanning VPN, firewall, NAC, and micro-segmentation platforms. Required Qualifications: 5 years of network engineering experience focused on access control, perimeter security, and edge networking. Hands-on production experience with at least two of the following (MANDATORY): Zscaler, Fortinet, Cisco ISE, Guardicore. Demonstrated experience managing remote access VPN at enterprise scale. Strong experience administering on-premises firewalls in campus and data center environments. Solid understanding of core networking and security protocols: TCP/IP, IPsec, 802.1X, RADIUS, DNS, DHCP. Experience working in large enterprise environments with a sizable device and user population. Preferred Qualifications: Experience with all four platforms (Zscaler, Palo Alto, Fortinet, ISE, Guardicore). Experience with network automation (Python, Ansible, or vendor APIs). Familiarity with zero-trust network access principles. If you like wild growth and working with happy, enthusiastic over-achievers, you ll enjoy your career with us! It is the policy of Mobility to provide equal employment opportunity (EEO) to all persons regardless of age, color, national origin, citizenship status, physical or mental disability, race, religion, creed, gender, sex, sexual orientation, gender identity and/or expression, genetic information, marital status, status with regard to public assistance, veteran status, or any other characteristic protected by federal, state or local law. In addition, Mobility will provide reasonable accommodations for qualified individuals with disabilities.

Requirements

Must-haves

Manage and operate a large-scale remote access VPN environment for a distributed workforce.
Administer on-premises firewalls (Fortinet and Palo Alto) across campus and data center locations, including policy management and rule lifecycle.
Administer Cisco ISE.
Deploy and manage Guardicore micro-segmentation to enforce workload-level security policies in the data center.
Operate Zscaler (ZIA, ZPA) for secure internet access and zero-trust private application connectivity.
Operate Prisma for for secure internet access and zero-trust private application connectivity.
Troubleshoot complex connectivity and access issues spanning VPN, firewall, NAC, and micro-segmentation platforms.
5 years of network engineering experience focused on access control, perimeter security, and edge networking.
Hands-on production experience with at least two of the following (MANDATORY): Zscaler, Fortinet, Cisco ISE, Guardicore.
Demonstrated experience managing remote access VPN at enterprise scale.
Strong experience administering on-premises firewalls in campus and data center environments.
Solid understanding of core networking and security protocols: TCP/IP, IPsec, 802.1X, RADIUS, DNS, DHCP.
Experience working in large enterprise environments with a sizable device and user population.

Nice-to-haves

Experience with all four platforms (Zscaler, Palo Alto, Fortinet, ISE, Guardicore).
Experience with network automation (Python, Ansible, or vendor APIs).
Familiarity with zero-trust network access principles.
If you like wild growth and working with happy, enthusiastic over-achievers, you ll enjoy your career with us!

Application prep

Use the role’s language and application details while tailoring your materials.

Keywords to mirror

python

Platform: workday
Effort: long