Job Location- Pune/ Chennai
Experience Range- 6-12 Years
Summary
As a Senior Network Security / ZTNA Engineer, you are responsible and play a critical role in designing, implementing and managing network secure access to applications by verifying users and devices, enforcing least-privilege access, micro-segmenting networks, and continuously monitoring for threats, focusing on identity-based policies across regions.
Core responsibilities
- Understand Internet and Private Access (ZTNA) Requirements. Define Network Security / ZTNA standards, policies and procedures.
- Produce detailed design documents and guide the implementation of features
- Design the integration touch points of Internet and Private Access (IdP, firewalls, SD-WAN, EUC, SIEM, Log, Server Teams) and coordinate with respective groups
- Deploy and manage ZTNA platforms to secure access to private apps
- Configure strong authentication (MFA) and authorization policies based on user/device identity
- Grant users access only to necessary applications, not the entire network
- Isolate network segments to prevent lateral movement by attackers
- Continuously assess device security (OS, antivirus status) before granting access.
- Define and enforce granular, context-aware policies (user, location, time, device).
- Create and implement test plans (including functionality, integrity, stress testing and definition of test methodologies and strategy)
- Monitor user and device activity for threat anomalies and adapt security posture in real-time.
- Involve in troubleshooting and complex problem resolutions
- Troubleshooting GRE/IPSec tunnels related to users access
- Guide and Coach teammates technically
- Create and maintain documentation and diagrams
Required Qualifications
- Must have implementation experience in one of the ZTNA/SSE technologies (Zscaler, Netskope, Prisma Access, Cloudflare)
- Or Must have implementation experience in one of the Network Security Firewalls (Palo alto, Forti, Juniper, Cisco ASA, Checkpoint) and/or Routing, Switching, Wireless (WAP,WLC)
- Bachelor's degree in technical or engineering, or computer science or equivalent experience
- 6+ years of experience supporting network and network security environments.
- Deep understanding of Zero Trust (ZTNA) and SASE concepts and architectures.
- Strong grasp of networking fundamentals (TCP/IP, DNS, HTTP, routing) and hybrid cloud architectures (Azure, AWS, GCP).
- Hands-on experience with security technologies like Secure Web Gateway (SWG), CASB, DLP, firewalls, and VPN alternatives.
- Ability to work in a fast-paced, high pressure, constantly changing environment.
- Experience in managing and driving complex global and regional projects with multiple functional teams
- Experience in security practices and methodologies including SSL/TLS encryption, Sandbox and Advanced threat protections.
- Knowledge and Experience in Authentication concepts of users (SAML, MFA and SSO).
- Certification and/or training with vendor-neutral or vendor-specific focus
- Excellent written and oral communication skills to technical and non-technical staff
- Excellent time management and organization skills
