Professional Services Consultant
Overview
Join a technical professional services team helping customers implement, onboard, and troubleshoot modern Zero Trust and security solutions. This remote consultant role is ideal for a hands-on security and networking professional who can translate complex technologies into successful production deployments, manage competing priorities, and guide customers through challenging technical environments.
You will work across identity, networking, endpoint management, web security, and cloud infrastructure while supporting projects from implementation through troubleshooting and optimization.
Required Skills
- 3+ years of experience in a customer-facing technical implementation or onboarding team, security engineering team, security operations center, or another highly technical environment.
- 3+ years of hands-on experience focused on Zero Trust and/or SASE.
- Strong command of the OSI model and core protocols, including:
- TCP/IP
- TLS, including TLS 1.3 and mTLS
- DNS
- HTTP/2
- Deep understanding of Zero Trust technologies, including:
- Zero Trust Network Access (ZTNA)
- Secure Web Gateway (SWG)
- Remote Browser Isolation (RBI)
- Data Loss Prevention (DLP)
- Cloud Access Security Broker (CASB)
- Cloud Email Security
- Strong knowledge of internet and security technologies, including:
- Forward and reverse proxies
- Content filtering and DLP
- Sandboxing
- Firewalls and next-generation firewalls (NGFWs)
- Web application firewalls (WAF)
- Bot management and rate limiting
- SSL/IPsec and SSL/TLS VPN appliances and services
- Hands-on experience configuring, deploying, migrating, or troubleshooting security technologies in production environments.
- Experience integrating identity providers with enterprise applications, including:
- SSO using SAML and OIDC
- SCIM user and group provisioning and deprovisioning
- Group and attribute mapping
- Identity provider handshake troubleshooting
- Working knowledge of modern identity technologies, including LDAP/Active Directory, MFA, FIDO2, and the role of the identity provider.
- Hands-on experience with Microsoft Entra ID, Okta, or Ping.
- In-depth DNS experience, including:
- DNS filtering
- DoH and DoT
- Conditional forwarding and split-DNS
- Internal-zone resolution
- Local domain fallback
- Experience with software distribution and deployment across Windows, macOS, and Linux environments.
- Windows and Linux server administration experience.
- Client-endpoint troubleshooting across Windows, macOS, and Linux.
- Ability to debug network connectivity issues using standard troubleshooting tools, including packet capture and DNS/HTTP tracing.
- Strong project management skills, including the ability to meet deadlines and prioritize competing demands.
- Professional fluency in English.
Nice-to-Have Skills
- Fluency in Spanish or Portuguese.
- Automation and infrastructure-as-code experience with:
- Terraform, preferably with the Cloudflare provider
- REST APIs
- Python or Bash scripting
- Git
- CI/CD
- Policy-as-code
- Cloud networking experience with AWS, Azure, or GCP, including:
- VPC/VNet
- Security Groups, NSGs, and NACLs
- Cloud-native DNS resolvers
- Cloud IAM
- Connector deployment in IaaS environments
- SASE on-ramp networking experience, including IPsec/GRE tunnels, BGP, Anycast, network segmentation, SD-WAN, MPLS, or WAN optimization.
- MDM software distribution experience with Intune or Jamf.
- Experience with Active Directory, Group Policy, Entra ID, or Intune.
- Observability experience, including Logpush, SIEM integrations, or Digital Experience Monitoring (DEX).
- Familiarity with SIEM platforms such as Splunk, Microsoft Sentinel, Elastic, or Chronicle.
- Knowledge of NIST Zero Trust Architecture and compliance frameworks such as GDPR, DORA, NIS2, ISO 27001, PCI DSS, HIPAA, SOC 2, or FedRAMP.
- Familiarity with AI security and shadow-AI governance, including AI-tool discovery, gating, and AI Gateway concepts.
Preferred Education and Experience
- 3+ years of relevant experience in technical implementation, customer onboarding, security engineering, security operations, or a comparable technical field.
- Demonstrated production experience configuring, deploying, migrating, and troubleshooting enterprise security, networking, identity, endpoint, or cloud technologies.
- A specific educational background was not provided for this position; equivalent hands-on technical experience is relevant.
Other Requirements
- Work arrangement: Fully remote.
- Time zone: Candidates must be able to work within Central Standard Time (CST).
- Engagement type: W2 only.
- Contract duration: 6 months.
- Start date: As soon as possible.
- English is required for day-to-day work. Spanish or Portuguese fluency is a strong advantage.
- Certifications such as CISSP, CCSP, SC-300, AZ-500, AWS Security Specialty, CCNP, CCIE, CompTIA, or equivalent are strong advantages. Forensic certifications, including GCFA, GCFE, GCIA, or GCIH, are welcome but not central to the role.
