Senior Cybersecurity Engineer, Advanced Security

Presidio, Where Teamwork and Innovation Shape the Future
At Presidio, we're at the forefront of a global technology revolution, transforming industries through cutting-edge digital solutions and next-generation AI. We empower businesses - and their internal customers - to achieve more through innovation, automation, and intelligent insights.

The Role
Join Presidio's Cybersecurity Advanced Security team as a Senior Cybersecurity Engineer. This role is a customer-facing technical authority within the Cybersecurity Advanced Security Services organization. This role is responsible for architecting, deploying, and optimizing solutions that provide edge security, Zero Trust, Network Threat Analytics, and enhanced performance while also supporting broader Secure Service Edge (SSE) and Secure Access Service Edge (SASE) delivery engagements across the organization.

This position sits at the intersection of Edge Security, Network Security, Zero Trust, cloud networking, and enterprise security architecture. The Engineer serves as a trusted technical advisor to enterprise customers, guiding architectural decisions that span web application security, API protection, Zero Trust access, secure web gateway capabilities, and cloud-delivered security services.

The ideal candidate can contribute to multi-vendor SSE/SASE architectures, partnering with advisory, network, and security operations teams to deliver cohesive, cloud-native security outcomes.

This role provides the chance to work with top platforms like Cloudflare and other NTA, NDR, and Zero Trust solutions. Mentor new talent and team up with global experts to shape the future of threat detection and response.

Travel Requirements:

This is a remotely based role within the Continental US with 10% associated travel as required.

Responsibilities Include:

• Lead high-profile delivery engagements across solutions such as Cloudflare with the opportunity to develop resilient architecture and guide clients through operational handoff.
• Serve as a senior technical escalation point for complex security, performance, and availability challenges.
• Lead enterprise migrations to Cloudflare and SSE/SASE platforms, including DNS cutovers and Zero Trust onboarding.
• Define phased migration strategies with rollback planning and risk mitigation.
• Produce and maintain reference architectures, technical documentation, and delivery artifacts.
• Lead the design, deployment, and optimization of Cloudflare-based security and performance solutions across enterprise environments.
  
  
  
  • Execute complex security engagements, including:
  • Web Application Firewall (WAF) and API security (API Shield, schema validation, JWT, mTLS)
  • Layer 3/4 and Layer 7 DDoS mitigation
  • Zero Trust Network Access (Access, Gateway, WARP, Tunnels)
  • Secure Web Gateway (SWG) and DNS-layer security
  • Global Load Balancing, Argo Smart Routing, and traffic steering
  
  
  
  
• Support the delivery of SSE and SASE architectures in collaboration with Advanced Security, Network, and Cyber Advisory teams.
  
  
  
  • Apply working knowledge of SSE components, including:
  • Secure Web Gateway (SWG)
  • Cloud Access Security Broker (CASB) concepts
  • Zero Trust Network Access (ZTNA)
  • Data protection and inspection in transit
  
  
  
  
• Contribute to SASE architectures that integrate:




• Cloud-delivered security services
• Identity-first access models
• SD-WAN and branch connectivity (where applicable)




• Architect solutions leveraging global anycast networks, CDN caching hierarchies, and distributed edge compute.
• Apply deep expertise in:




• TCP/IP and OSI layers 1-7
• BGP, global routing, and traffic engineering
• DNS, DNSSEC, and edge-based traffic control
• HTTP/2, HTTP/3, QUIC, and TLS 1.2/1.3




• Design hybrid and multi-cloud origin architectures optimized for security, performance, and resiliency.
• Design and deploy solutions across AWS, Azure, and GCP environments.
• Automate security and network configurations using Terraform, APIs, and CI/CD pipelines.
• Develop Cloudflare Workers using JavaScript/TypeScript for edge logic, security controls, and performance optimization.
• Integrate Cloudflare services with SIEM, SOAR, IAM, and security operations platforms.
• Collaborate with Cyber Engineering team members globally to ensure service consistency, share best practices, and deliver with excellence across regions.
• Act as a multi-platform subject matter expert, advising clients on architecture, platform optimization, and operational best practices.
• Troubleshoot and resolve complex issues during deployment and post-implementation across all supported platforms.
• Create high-quality technical documentation, including solution designs, runbooks, and as-built records.
• Mentor junior engineers to elevate team-wide technical capability.

Required Skills and Professional Experience:

• Bachelor's degree in Cybersecurity, Computer Science, or related field, or equivalent work experience and/or military experience
• 5-8 years' experience in progressively senior cybersecurity roles, with demonstrable expertise in Application security and Zero Trust transformation projects
• 5-8 years' experience in senior customer-facing technical roles (Solutions Architect, Senior Engineer, Technical Consultant)
• 3 years demonstrated threat intelligence and incident response experience
• Demonstrated success delivering enterprise-scale security, networking, or cloud security solutions
• Experience supporting Fortune 500 or large enterprise customers strongly preferred
• Minimum 2 years hands-on experience with at least two of the following: Cloudflare and Zscaler
• Technical expertise in SASE, SSE, ZTNA, SWG, CASB, DLP, SD-WAN, and Email Security
• Proven track record delivering complex, multi-platform security projects in enterprise environments
• Strong communication skills, capable of engaging technical and executive stakeholders alike

Additional Required Skills and Professional Experience:

• Multi-platform administration and optimization
• Hands on experience with one or more of the following:




• TCP/IP, OSI layers 1-7, BGP, DNS
• CDN, anycast, and edge architectures
• WAF, DDoS mitigation, API security
• Zero Trust and identity-centric security




• Python, PowerShell, Terraform, JavaScript, and CI/CD Pipelines
• Zero-Trust solution, CDN, and WAF deployment at scale
• Strong troubleshooting and root cause analysis skills in complex environments
• Ability to translate security strategy into actionable technical designs

Desired Skills and Professional Experience:

• Vendor certifications such as Operate Cloudflare DNS, Cloudflare Zero Trust 301, Cloudflare Zero Trust 401, ZDTA, ZDTE, ZDXA
• Experience with hybrid/multi-cloud deployments (AWS, Azure, GCP)
• Familiarity with emerging threats and adversary tradecraft
• Advanced certifications highly valued

Your future at Presidio

Joining Presidio means stepping into a culture of trailblazers - thinkers, builders, and collaborators - who push the boundaries of what's possible. With our expertise AI-driven analytics, cloud solutions, cybersecurity, and next-gen infrastructure, we enable businesses to stay ahead in an ever-evolving digital world.

Here, your impact is real. Whether you're harnessing the power of Generative AI, architecting resilient digital ecosystems, or driving data-driven transformation, you'll be part of a team that is shaping the future.

Ready to innovate? Let's redefine what's next-together.

About Presidio
Presidio is committed to hiring the most qualified candidates to join our amazing culture. We aim to attract and hire top talent from all backgrounds, including underrepresented and marginalized communities. We encourage women, people of color, people with disabilities, and veterans to apply for open roles at Presidio. Diversity of skills and thought is a key component to our business success.

At Presidio, speed and quality meet technology and innovation. Presidio is a trusted ally for organizations across industries with a decades-long history of building traditional IT foundations and deep expertise in AI and automation, security, networking, digital transformation, and cloud computing. Presidio fills gaps, removes hurdles, optimizes costs, and reduces risk. Presidio's expert technical team develops custom applications, provides managed services, and enables actionable data insights and builds forward-thinking solutions that drive strategic outcomes for clients globally. For more information visit

*****

Applications will be accepted on a rolling basis.

Presidio has a strong commitment to the community we serve and our employees. As an Equal Opportunity Employer, we strive to have a workforce that includes the community we serve.

Presidio is an Equal Opportunity Employer Disability/Vets. We evaluate qualified applicants without regard to race, color, religion, sex, age, national origin, disability, veteran status, genetic information, and other legally protected categories.

The "Know Your Rights" Poster is available here: https://www.eeoc.gov/poster

Presidio EEO Policy Statement is available here: https://www.presidio.com/careers

Presidio is committed to working with and providing reasonable accommodations to individuals with disabilities. If you need a reasonable accommodation because of a disability for any part of the employment process, please send an e-mail to recruitment@presidio.com and let us know the nature of your request and your contact information.

Presidio is a VEVRAA Federal Contractor requesting priority referrals of protected veterans for its openings. State Employment Services, please provide priority referrals to.

Notice of Massachusetts Candidates: It is unlawful in Massachusetts to require or administer a lie detector test as a condition of employment or continued employment. An employer who violates this law shall be subject to criminal penalties and civil liability.

Recruitment Agencies, Please Note: Presidio does not accept unsolicited agency resumes/CVs. Do not forward resumes/CVs to our career's email address, Presidio employees or any other means. Presidio is not responsible for any feeds related to unsolicited resumes/CVs.P

#LI-PH1