Security Network Engineer

Description

We are looking for a Security Network Engineer to support a Contract engagement based in San Diego, California. This role will guide the design and optimization of secure connectivity across a Cisco Viptela SD-WAN environment integrated with Zscaler, with a strong focus on resiliency, user experience, and identity-aware traffic handling. The ideal consultant will bring advanced technical judgment, help shape architecture decisions, and work closely with internal stakeholders to strengthen network security performance during failover and routing events.

Responsibilities:
Assess the current Zscaler and Cisco Viptela landscape to identify gaps, risks, and opportunities for improved secure connectivity.
Compare agent-based and tunnel-based deployment approaches, then recommend the most effective model for business, security, and operational needs.
Develop and test failover designs across multiple network circuits to reduce user disruption during provider or path changes.
Refine traffic steering and policy behavior to improve session stability and application access within the SD-WAN environment.
Preserve key identity-related data used for security enforcement and visibility, including user and device context across network flows.
Partner with internal technical teams and external service providers to implement configuration improvements and validate outcomes.
Troubleshoot complex issues involving cloud security controls, SD-WAN routing behavior, and end-user connectivity.
Produce clear technical documentation covering findings, recommended changes, and the target-state architecture.
Advise on routing, segmentation, and secure access strategies involving technologies such as BGP, Cisco routing platforms, Cisco ASA, Palo Alto Firewall, and related network security tools.

Requirements

Demonstrated expertise with Zscaler Internet Access, Zscaler Client Connector, and secure tunnel deployment methods in enterprise environments.
Strong hands-on experience with Cisco Viptela SD-WAN, including path selection, resiliency planning, and failover behavior.
Deep understanding of identity-aware security policy design and the importance of maintaining user and device context across traffic flows.
Proven ability to troubleshoot integrations between cloud-delivered security platforms and complex SD-WAN architectures.
Solid background in enterprise network security, including segmentation, traffic engineering, and high-availability design.
Practical knowledge of BGP, Cisco routers, Cisco ASA, Palo Alto Firewall, and broader network security infrastructure.
Ability to provide both architecture-level guidance and detailed configuration recommendations in a consulting environment.
Relevant Zscaler or Cisco certifications are preferred.

Technology Doesn't Change the World, People Do.

Robert Half is the world's first and largest specialized talent solutions firm that connects highly qualified job seekers to opportunities at great companies. We offer contract, temporary and permanent placement solutions for finance and accounting, technology, marketing and creative, legal, and administrative and customer support roles.

Robert Half works to put you in the best position to succeed. We provide access to top jobs, competitive compensation and benefits, and free online training. Stay on top of every opportunity - whenever you choose - even on the go. Download the Robert Half app and get 1-tap apply, notifications of AI-matched jobs, and much more.

All applicants applying for U.S. job openings must be legally authorized to work in the United States. Benefits are available to contract/temporary professionals, including medical, vision, dental, and life and disability insurance. Hired contract/temporary professionals are also eligible to enroll in our company 401(k) plan. Visit roberthalf.gobenefits.net for more information.

2025 Robert Half. An Equal Opportunity Employer. M/F/Disability/Veterans. By clicking "Apply Now," you're agreeing to Robert Half's Terms of Use and Privacy Notice.