Network Security Engineer – Zscaler & Next-Gen Firewalls

Job Title: Network Security Engineer – Zscaler & Next-Gen Firewalls Location: Major Metro Cities (Bengaluru, Mumbai, Pune, Kolkata, Hyderabad, Chennai) Work Mode: Hybrid to Remote Experience: 5 to 6 Years Total (2 to 3 Years in Zscaler) Role Overview We are looking for an experienced Network Security Engineer to design, implement, maintain, and support our global network security infrastructure. This position is based out of major metro cities with a flexible hybrid-to-remote work setup. The ideal candidate will bring 5–6 years of total experience in network security, including 2–3 years of dedicated hands-on expertise with Zscaler platforms (ZIA/ZPA). You will play a crucial role in driving our cloud security architecture while maintaining and troubleshooting enterprise Next-Generation Firewalls (NGFWs) such as Fortinet/FortiGate and Palo Alto Networks. Key Responsibilities

Zscaler Platform Management (Primary Focus) Deploy, configure, and manage Zscaler Internet Access (ZIA) and Zscaler Private Access (ZPA) environments across the enterprise. Manage and troubleshoot Zscaler Client Connector (ZCC) deployments, forwarding policies, PAC files, and authentication workflows. Configure security policies, URL filtering, Cloud Sandbox, Advanced Threat Protection (ATP), SSL inspection, and Data Loss Prevention (DLP) rules. Maintain App Connectors, Service Connectors, and tunnel configurations.

Firewall & Infrastructure Operations Manage day-to-day operations, rule base optimizations, NAT, and IPSec VPN tunnels across Fortinet (FortiGate) and Palo Alto Networks firewalls. Manage rule updates, object creation, and policy changes using centralized management tools like Panorama (Palo Alto) and FortiManager. Perform firmware upgrades, patch management, and vulnerability remediations for firewall hardware and virtual instances.

Operations & Incident Management Act as an escalation point for Level 2/Level 3 network security incidents, connectivity issues, and performance bottlenecks. Utilize tools like Wireshark, tcpdump, and Zscaler Digital Experience (ZDX) to diagnose complex traffic flow, SSL/TLS, and routing issues. Support identity integration via SSO, SAML, Azure AD/Entra ID, or Okta for Zscaler and firewall access policies.

Requirements & Qualifications Experience: 5 to 6 years of overall experience in Network Security Engineering, with at least 2 to 3 years focused on Zscaler administration and deployment. Primary Skills: Zscaler Internet Access (ZIA), Zscaler Private Access (ZPA), and Zscaler Client Connector (ZCC). Secondary Skills: Deep hands-on experience with Palo Alto Networks and Fortinet (FortiGate) firewalls. Core Networking: Strong grasp of TCP/IP, BGP, OSPF, DNS, IPsec VPNs, SSL/TLS decryption, and NAT configurations. Identity & Access: Working understanding of SAML, SCIM, Active Directory, and Identity Providers (IdP) for zero-trust access policies.

Preferred Certifications Zscaler: ZCCA-IA / ZCCA-PA or ZDTA / ZDTE (Zscaler Certified Digital Transformation Engineer/Administrator) Palo Alto: PCNSA / PCNSE Fortinet: NSE 4 / NSE 5 General: CCNP Security or CISSP Skills: zscaler,fortinet,zia,network security,fortigate,palo alto networks,firewalls,zpa