Prisma ZTNA Specialist

Job Requirements*

• 8+ years of experience in cyber security, network security, Prsma cloud security, identity security, endpoint security, or enterprise security architecture roles.
• Strong understanding of Zero Trust principles including never trust/always verify, identity-centric access, least privilege, device posture, segmentation, and continuous monitoring.
• Hands-on experience with SASE/SSE/ZTNA platforms such as Zscaler, Prisma Access, Cisco SSE, or equivalent secure access technologies.
• Experience with identity and access security including Microsoft Entra ID / Azure AD, MFA, Conditional Access, RBAC, PAM/PIM, privileged access controls, and identity governance.
• Strong knowledge of network security controls including firewalls, VPN, IDS/IPS, URL filtering, application control, NAC, proxy, TLS inspection, and secure remote access.
• Experience designing security segmentation and micro-segmentation across users, devices, applications, workloads, and data center/cloud environments.
• Good knowledge of cloud security controls across Azure/AWS/GCP including IAM, security groups, network ACLs, CSPM, logging, monitoring, and compliance posture.
• Exposure to SIEM/SOAR and threat detection platforms such as Microsoft Sentinel, Splunk, QRadar, ArcSight, or equivalent security monitoring solutions.
• Experience in vulnerability management, security hardening, risk assessment, incident response coordination, and remediation tracking.
• Ability to create security HLD/LLD, architecture diagrams, implementation plans, SOPs, runbooks, risk documentation, and stakeholder presentations.

Key Responsibilities*

• Define enterprise Zero Trust strategy, target-state security architecture, and implementation roadmap across identity, endpoint, network, cloud, applications, and data layers.
• Design secure remote access and private application access solutions using ZTNA/SASE/SSE platforms and align them with enterprise access policies.
• Architect identity-led security controls including MFA, Conditional Access, PAM/PIM, least privilege access, identity governance, and privileged access monitoring.
• Design and review firewall, VPN, NAC, segmentation, micro-segmentation, and secure internet breakout architectures.
• Collaborate with infrastructure, network, cloud, endpoint, IAM, SOC, application, compliance, and business teams to implement Zero Trust controls.
• Review existing security posture, identify gaps, perform risk assessments, and recommend practical remediation measures aligned to business requirements.
• Prepare HLD, LLD, design standards, security patterns, migration plans, rollout strategies, and operational handover documents.
• Integrate security solutions with SIEM/SOAR, ITSM, vulnerability management, endpoint security, and monitoring platforms for visibility and response.
• Provide technical leadership during security incidents, architecture reviews, audits, escalations, migrations, and transformation programs.

Drive governance, documentation, compliance alignment, operational readiness, and continuous improvement of Zero Trust Role & responsibilities

Preferred candidate profile