Legato Security

Network Engineer

• Support, administer, configure, and troubleshoot firewalls, Zscaler, Netskope, VPN technologies, and related network security platforms in internal and customer environments
• Work directly with customers to understand requirements, troubleshoot problems, evaluate solutions, and implement changes
• Respond to and resolve service tickets, incidents, requests, and escalations involving network connectivity and security technologies
• Serve as an escalation point for complex technical issues
• Participate in firewall, Zscaler, and Netskope implementation, migration, upgrade, replacement, and configuration projects
• Configure and maintain Zscaler Internet Access, Zscaler Private Access, Zscaler Client Connector, and Netskope One services
• Support policies involving URL filtering, firewall policies, SSL/TLS inspection, authentication, access policies, application access, traffic forwarding, routing, DNS, DHCP, NAT, VPNs, VLANs, and switching
• Configure and troubleshoot SSL VPN, IPsec, Remote Access VPN, and Site-to-Site VPN connections
• Review logs, packet captures, routing tables, traffic flows, error messages, and diagnostic information to determine root cause
• Assist with customer onboarding, configuration changes, testing, and validation before production deployment
• Create and maintain firewall documentation, configuration records, troubleshooting procedures, implementation notes, and customer-specific technical documentation
• Participate in incident response, problem management, and root-cause analysis
• Manage multiple tickets, incidents, projects, and customer requests individually and collaboratively
• Assist engineers and analysts with troubleshooting processes, technical methodologies, and network security best practices
• Identify opportunities to improve network configurations, security controls, operational processes, documentation, and customer experience
• Maintain awareness of emerging networking and cybersecurity technologies, vulnerabilities, vendor changes, and industry best practices
• Participate in rotational, non-extensive on-call coverage

Network Security Engineer