Role Description We are seeking a skilled Zscaler Engineer with a background in networking and security to design, implement, and manage Zscaler cloud security solutions. The ideal candidate will have a working knowledge of Palo Alto Networks and Cisco firewalls to ensure robust network security postures for our organization and clients. CLT and fully remote position. Must reside in Brazil. Benefits include: - Health and dental insurance - Meal and restaurant vouchers - Fixed monthly stipend for internet and mobile expenses - Company-issued device Responsibilities - Zscaler Implementation: Deploy, configure, and optimize Zscaler solutions (ZIA, ZPA, ZCC, and ZDX) to enforce zero-trust security policies and enable secure access to applications. - Firewall Management: Configure and manage Palo Alto Networks and Cisco firewalls with a working knowledge to enforce security policies, perform threat prevention, and ensure network segmentation. - Network Security: Monitor and troubleshoot network security issues, ensuring compliance with industry standards and best practices. - Policy Optimization: Develop and fine-tune security policies across Zscaler and firewalls to align with business needs and security requirements. - Incident Response: Investigate and respond to security incidents as an SME for Zscaler and firewalls. - Documentation & Training: Create detailed technical documentation and provide training to internal teams on Zscaler and related technologies. - Collaboration: Work closely with network, security, and application teams to integrate Zscaler solutions into existing infrastructure. - Stay Current: Keep abreast of emerging threats, industry trends, and advancements in Zscaler, Palo Alto, Cisco, and related technologies. Qualifications - Education: Associate Degree, or, Technologo (Technologist) Degree, or higher preferred. - Experience: - 5+ years of experience in networking and security engineering. - 2+ years of hands-on experience with Zscaler (ZIA, ZPA, ZCC, and ZDX). - Proven working knowledge in configuring and managing Palo Alto Networks firewalls (PA and VM-Series, Panorama). - Proven working knowledge in configuring and managing Cisco firewalls. - Certifications (preferred): - Zscaler Certified Cloud Professional - Private Access (ZCCP-PA). - Zscaler Certified Cloud Professional - Internet Access (ZCCP-IA). - Palo Alto Networks Certified Network Security Administrator (PCNSA). - Cisco Certified Network Associate (CCNA). - Technical Skills: - Deep understanding of networking protocols (TCP/IP, DNS, DHCP, BGP, OSPF). - Proficiency in firewall policy management, NAT, VPN, and threat prevention. - Familiarity with Cisco ISE for 802.1X, TACACS+, and guest access solutions. - Familiarity with cloud security concepts and SASE (Secure Access Service Edge) frameworks. - Knowledge of scripting (Python, Bash) for automation is a plus. - Soft Skills: - Strong problem-solving and analytical skills. - Excellent communication and collaboration abilities. - Ability to work independently and manage multiple priorities in a fast-paced environment. Preferred Qualifications - Experience with other SASE or SSE platforms (e.g., Prisma Access). - Knowledge of cloud platforms (AWS, Azure, GCP, OCI) and their security controls. - Familiarity with SIEM tools (e.g., Splunk, Exabeam) and endpoint security solutions. - Previous experience in a customer-facing or consulting role. Benefits - Health and dental insurance - Meal and restaurant vouchers - Fixed monthly stipend for internet and mobile expenses - Company-issued device

• Manage security assessments for a variety of applications and domains, including cloud computing environments • Lead multiple large, complex, high-risk security assessment initiatives concurrently • Implement security controls and verify control effectiveness in alignment with NIST RMF and ISO standards • Conduct risk assessments and document compliance measures to meet organizational and regulatory requirements • Evaluate, validate, and support documentation required for A&A and accreditation activities for new and existing IT systems • Ensure appropriate treatment of risk, compliance, and assurance from internal and external perspectives • Support development of actionable security blueprints, principles, models, designs, standards, and guidelines • Apply security architecture principles and best practices to help design and maintain secure IT infrastructures aligned to A&A policies • Use network and vulnerability scanning tools to interrogate systems for configuration and security status • Utilize GRC tools to manage and track A&A workflows, artifacts, and approvals • Serve as an A&A subject matter expert, providing guidance to stakeholders, business units, and new A&A resources • Build and maintain schedules and step-by-step action plans; brief cross-functional teams and executives on status and risk

• Own and evolve Overstory’s compliance program, ensuring ongoing alignment with SOC 2, ISO 27001, and other relevant frameworks • Drive vulnerability management end-to-end, from detection to remediation, working closely with engineering teams to prioritize and resolve risks efficiently • Design and improve security processes and controls across infrastructure, applications, and internal systems • Lead security input in architecture and engineering decisions, helping teams build secure-by-design systems • Oversee and improve identity and access management, endpoint security, and core IT security practices • Own vendor security and third-party risk management, including assessments, risk evaluation, and mitigation strategies • Lead audit readiness and execution for SOC 2 and ISO 27001, including control design, evidence collection, and auditor coordination • Partner with customer-facing teams to handle security questionnaires and build scalable, high-quality response processes • Contribute to security awareness and culture, mentoring others and raising the security bar across the organization

Role Description Tier One Technologies has an immediate need for an Information System Security Officer to support our US Government client. This will be a 100% remote position. SELECTED CANDIDATES WITHOUT REQUIRED CLEARANCE WILL BE SUBJECT TO A FEDERAL GOVERNMENT BACKGROUND INVESTIGATION TO RECEIVE IT. - Conduct assessments of threats and vulnerabilities. - Determine deviations from acceptable configurations or enterprise or local policy. - Assess the level of risk and develop and/or recommend appropriate mitigation countermeasures in operational and non-operational situations. Qualifications - A degree from an accredited College/University in the applicable field of services is required. If an individual's degree is not in the applicable field, then 4 additional years of related experience is required. - 8+ years of overall cyber security-related experience. - Ability to manage responsibility for security assessments of a variety of applications or domains, including cloud computing, and to manage several project/initiatives of large size, complexity, and risk. - Proficiency in implementing security controls, conducting risk assessments, and documenting compliance measures based on NIST RMF and ISO standards to meet organizational and regulatory requirements. - Proficiency in successfully evaluating and supporting documentation, validation, and accreditation processes necessary to ensure that new and existing Information Technology systems meet the organization's Information Assurance and security requirements. - Proficiency in utilizing Governance, Risk, and Compliance (GRC) tools for managing Assessment & Authorization (A&A) processes. - Expertise in ensuring appropriate treatment of risk, compliance, and assurance from internal and external perspectives. - Demonstrated ability to support development of actionable security blueprints, principles, models, designs, standards, and guidelines to ensure enterprise IT architecture and support is consistent, usable, secure and adds value to the business. - Experience with network and vulnerability scanning tools and technologies to interrogate systems for configuration and status. - In-depth understanding of security architecture principles and best practices to design, implement, and maintain secure IT infrastructures in alignment with A&A policies. - Ability to serve as subject matter expert (SME) for the company’s A&A process, including providing guidance to stakeholders, business units, and new A&A resources as necessary. - Strong organizational skills and ability to build and maintain schedules and step-by-step action plans. - Effective communication and collaboration skills to work with cross-functional teams, business units, stakeholders, and IT professionals, and brief executives. Requirements - Must be able to obtain a Position of Public Trust Clearance. - Be able to pass a drug screening, criminal history, and credit checks. - Must be a US Citizen or have permanent residence status (Green Card). - Must have lived in the United States for the past 5 years. - Cannot have more than 6 months travel outside the United States within the last five years. Military Service excluded. (Exception does not include military family members.)