| Network Platform Engineer Contract-to-Hire (6 Months) · Hybrid, Denver Metro · No Sponsorship |
| ABOUT THE DOYLE GROUP |
The Doyle Group is a proven partner for Placement and Consulting services, headquartered in Denver, CO. Our core mission is to forge genuine partnerships with our clients who seek strategic talent solutions and to assist highly skilled candidates looking for their next career opportunity. With over 30 years of industry experience, our consultative approach allows us to provide a higher level of guidance and insight, empowering our clients to secure top IT talent that fits seamlessly into their team and culture. We look forward to collaborating to help you achieve your career goals.
| POSITION SUMMARY |
Our client, an established enterprise organization, is hiring a Network Platform Engineer to own its cloud-delivered Security Service Edge (SSE) platform. The platform is central to how the organization delivers secure web and application access for its users, whether they are in the office or remote, and this role will be responsible for keeping it healthy, reliable, and continuously improving.
This is a hands-on technical ownership role, not an architecture or people-management position. You will run the platform day to day: tuning and maintaining policies, resolving complex issues, and automating routine work so the team can focus on improvement rather than repetitive tasks. The right person built a foundation in networking, grew into security, and wants to own a platform end to end. You will work closely with network, security, and identity teams.
Location: Hybrid in the Denver metro area preferred. Remote may be considered for an exceptional candidate. Core hours follow Mountain Time.
Engagement: This role begins as a six-month contract with the intent to convert to a full-time employee. Strong performers may be converted sooner.
Candidates must be authorized to work in the United States without current or future visa sponsorship.
| RESPONSIBILITIES |
- Own the day-to-day operation, health, and performance of an enterprise SSE/SASE platform.
- Serve as the technical owner for the platform, setting standards and priorities for new capability adoption.
- Operate, tune, and maintain Secure Web Gateway (SWG) policies, traffic steering, SSL inspection, and web filtering.
- Support and expand Zero Trust Network Access (ZTNA) capabilities.
- Lead troubleshooting, incident response, and root-cause analysis for complex platform and client issues.
- Manage platform upgrades, client releases, testing, and validation.
- Automate repetitive operational work using scripting, APIs, and AI-assisted tooling.
- Build and maintain integrations with identity (SAML/SCIM), ITSM, and security monitoring platforms.
- Develop runbooks, support procedures, dashboards, and service health metrics.
- Work with the vendor on escalations and evaluation of new capabilities.
- Partner with network, security, and identity teams, including colleagues in other time zones.
| MINIMUM EXPERIENCE |
- 5–8 years of progressive experience in enterprise networking and network security, with a clear path from networking into security.
- Hands-on operational experience with a cloud-delivered SSE/SASE platform, including:
- Secure Web Gateway (SWG): policy design and tuning, steering, SSL inspection, web filtering
- Zero Trust Network Access (ZTNA) concepts and day-to-day operation
- Endpoint client/agent deployment, upgrades, and troubleshooting
- Working knowledge across the broader SSE stack (SWG, ZTNA, CASB)
- Strong networking foundation, including:
- Routing and switching
- TCP/IP, DNS, and web proxy troubleshooting
- Identity integration experience with Microsoft Entra ID, SAML, and SCIM.
- Scripting ability (Python, PowerShell, or similar) and a track record of streamlining or automating operational work.
- Experience supporting enterprise platforms used by thousands of people across multiple sites.
- Bachelor’s degree or equivalent professional experience.
- Must be legally authorized to work in the United States without sponsorship now or in the future.
| ADDITIONAL PLUS |
- CASB and DLP experience
- Cisco routing, switching, or SD-WAN experience
- Automation using REST APIs, workflow tools, or AI-assisted operations
- Prior involvement in an SSE/SASE implementation or migration from legacy proxy or VPN
- Experience in a highly regulated environment such as healthcare or financial services
- ServiceNow integration experience
- SSE/SASE vendor certification
| SALARY / WAGE RANGE |
$TBD/hour
Compensation for the role will depend on a number of factors, including a candidate’s qualifications, skills, competencies, location, and experience, and may fall outside of the range shown. The Doyle Group offers a competitive rewards package, which includes a 401(k), healthcare coverage, and other benefits.
This is a contract-to-hire opportunity. Full-time compensation details will be discussed during the screening process.
