Zero Trust Operations Engineer

Your Opportunity

At Schwab, you’re empowered to make an impact on your career. Here, innovative thought meets creative problem solving, helping us challenge the status quo and transform the finance industry together. We believe in the importance of in-office collaboration and fully intend for the selected candidate for this role to work on site in the specified location(s).

As a Manager within Zero Trust Operations, you will help protect Schwab’s critical systems by supporting secure, reliable access across network and cloud security solutions. You will respond to incidents and service disruptions, analyze logs and telemetry, determine root causes, and make informed decisions that balance security, availability, and user experience.

Working across network, identity, endpoint, DevSecOps, and cloud teams, you will coordinate incident resolution, implement and validate configuration and access-control changes, and communicate risks and impacts to stakeholders. Your work will strengthen cyber resilience by improving security policies, operational procedures, documentation, and automation. Success requires cybersecurity expertise, analytical thinking, adaptability, and collaborative problem solving in a fast-paced production environment.

What you have

Required Qualifications

• 2+ years of cybersecurity experience.
• 2+ years of direct operational support experience with Zero Trust solutions, including ZTNA, CASB, SWG, or SASE technologies.
• Working knowledge of networking fundamentals and cloud security concepts.
• Ability to investigate incidents, interpret logs and telemetry, identify root causes, and make sound decisions during complex operational situations.
• Effective communication, problem solving, analytical thinking, collaboration, and adaptability.
• Bachelor’s degree in Computer Science, Cybersecurity, or an equivalent combination of education and experience.

Preferred Qualifications

• Experience automating operational or troubleshooting workflows using Python, scripting, Ansible, Salt, or similar technologies.
• Experience implementing access controls, segmentation changes, security policies, and configuration updates in production environments.
• Experience improving runbooks, incident-response procedures, technical documentation, and operational processes.
• Security certification such as Security+, CASP+, GSEC, SSCP, CDPSE, GIAC/SANS, or equivalent.
• Zero Trust vendor certification.
• Networking certification such as Network+, CCNA, CCNP, CCIE, or equivalent.
• Commitment to continuous learning across cybersecurity, networking, cloud, identity, and automation.

In addition to the salary range, this role is eligible for bonus or incentive opportunities.