DIGITAL SECURITY - Threat Prevention - NETWORK SECURITY Professional

The Senior Network Security Engineer - Zscaler is a subject matter expert (SME) responsible for the architecture, engineering, implementation, optimization, and operational support of Cepheids global Secure Access Service Edge (SASE) and Zero Trust security platform, with primary focus on Zscaler Internet Access (ZIA), Zscaler Private Access (ZPA), and Zscaler Digital Experience (ZDX). This role provides technical leadership for enterprise security transformation initiatives, cloud security architecture, secure remote access, and global network security modernization.

The ideal candidate possesses deep expertise in Zscaler technologies, enterprise networking, cloud security, identity integration, and Zero Trust architecture while serving as the highest-level escalation point for complex security and connectivity challenges.

This position is part of the IT Global Infrastructure & Operation team and will be located in Bengaluru, India. At Cepheid, our vision is to be the leading provider of seamlessly connected diagnostic solutions.

• Minimum 7+ years of progressive experience in network and security engineering.
• Minimum 4+ years of hands-on experience with Zscaler technologies (ZIA, ZPA, ZDX).

n this role, you will have the opportunity to:

• Architect, design, deploy, and optimize enterprise-wide Zscaler solutions, including ZIA, ZPA, ZDX, Cloud Firewall, CASB, Browser Isolation, and Data Loss Prevention (DLP).
• Develop scalable security architectures supporting global offices, manufacturing facilities, remote users, and third-party partners.
• Drive Zero Trust transformation initiatives by replacing traditional VPN and perimeter-based security models.
• Design and implement secure access policies leveraging identity-based access controls, contextual access, and least-privilege principles.
• Integrate Zscaler platforms with enterprise Identity Providers such as Azure AD (Entra ID), Okta, Ping Identity, and Active Directory.
• Implement and maintain authentication frameworks including SAML, OAuth, OpenID Connect, and Multi-Factor Authentication (MFA).

The essential requirements of the job include:

• Minimum 7+ years of progressive experience in network and security engineering.
• Minimum 4+ years of hands-on experience with Zscaler technologies (ZIA, ZPA, ZDX).
• Proven experience supporting large-scale global enterprise environments.
• Bachelors degree in Computer Science, Information Technology, Cybersecurity, or a related field, or equivalent practical experience.
• Deep hands-on experience with:
  • Zscaler Internet Access (ZIA)
  • Zscaler Private Access (ZPA)
  • Zscaler Digital Experience (ZDX)
  • Cloud Firewall
  • DLP
  • CASB
  • Browser Isolation
  • SSL Inspection
  • Cloud Security Posture integrations

Travel, Motor Vehicle Record & Physical/Environment Requirements:

• 5%-15% travel as per business requirements.

It would be a plus if you also possess previous experience in:

• Python, YAML
• Jira, Confluence
• Ansible automation
• Zscaler Certified Architect (ZCCA)
• Zscaler Certified Expert (ZCE)
• Zscaler Certified Administrator (ZCA)
• CCNP Security or CCIE Security