BENGALURU · FULLTIME
Senior - Zero Trust Network Access
Ernst Young
Bengaluru · onsite · Posted 4d ago
Sourced from
Undisclosed2–3 yrsfulltimeBengaluru
Your match
?
Sign in to see your match score, skill gaps & tailored resume.
Section · 01
About this role
Job Summary
Job Description: Senior Zero Trust Network Access (ZTNA) Engineer
Experience Level: 35 Years
Role Type: Full-Time
Role Overview We are seeking a Senior Zero Trust Network Access (ZTNA) Engineer to architect, deploy, and manage our modern identity-centric perimeter security solutions. Spanning the complete service delivery lifecycle - Assess, Build, Transition, and Operations - this role is pivotal in replacing legacy VPN architectures with least-privilege, context-aware access controls. The ideal candidate will have hands-on experience integrating ZTNA platforms with enterprise Identity Providers (IdP), enforcing device posture checks, and securing hybrid enterprise applications.
Key Responsibilities Assess (Architecture Review & Posture Analysis) - Conduct comprehensive audits of existing remote access models, legacy VPN concentrators, and internal application exposure.
- Analyze user access patterns, application dependencies, and data flows to map out micro-segmentation and least-privilege policies.
- Evaluate current Identity Provider (IdP) readiness, multi-factor authentication (MFA) enforcement, and endpoint device posture compliance mechanisms.
- Deploy, configure, and manage enterprise ZTNA solutions (e.g., Zscaler ZPA, Palo Alto Prisma Access, Cloudflare One, or Cisco Secure Access).
- Design and implement context-aware access policies combining user identity, device health, location, and risk scores.
- Provision and configure ZTNA connectors (gateways/brokers) across on-premise data centers, AWS, Azure, and GCP environments.
- Integrate ZTNA platforms with enterprise Single Sign-On (SSO) and Directory Services (e.g., Entra ID/Azure AD, Okta).
- Drive the phased migration roadmap from legacy VPN solutions to ZTNA with minimal disruption to business units.
- Coordinate User Acceptance Testing (UAT) with business application owners to validate seamless context-based access.
- Develop "As-Built" architecture diagrams, policy migration runbooks, and troubleshooting guides for support desks.
- Conduct enablement sessions for IT helpdesks and operations teams on ZTNA client troubleshooting and policy management.
- Serve as the senior escalation point for complex ZTNA connectivity, identity assertion, and connector health issues.
- Perform continuous policy lifecycle management, reviewing access rules, removing stale policies, and refining posture checks.
- Monitor ZTNA tunnel performance, broker throughput, and client app stability across global endpoints.
- Ensure real-time security telemetry and access logs stream successfully into the SIEM for threat hunting and compliance monitoring.
- Understanding of ITIL-based Change Management, managing end-to-end change lifecycle activities, CAB coordination, and compliant implementation of infrastructure and application changes.
- Experience: 35 years of dedicated experience in network security, identity and access management (IAM), or zero trust architecture implementation.
- Core Technologies: Hands-on expertise with market-leading ZTNA platforms (e.g., Zscaler Private Access, Palo Alto Prisma Access, Cloudflare One, or Microsoft Global Secure Access).
- Identity & Networking: Strong grasp of IAM principles, SAML/OIDC authentication protocols, Active Directory/Entra ID, and foundational networking (DNS, TCP/IP, routing, firewalls).
- Zero Trust Principles: Deep understanding of "Never Trust, Always Verify" paradigms, micro-segmentation, and device posture validation frameworks.
- Certifications: Relevant vendor or cloud security certifications (e.g., Zscaler Certified Cloud Security Professional, PCNSE, AWS/Azure Security, or CISSP/CCSP) are highly preferred.
- Soft Skills: Strong cross-functional collaboration skills, ability to manage enterprise-wide change initiatives, and excellent technical documentation capabilities.
Sourced from naukri
Let the agent run this one for you.
Tailored resume, auto-apply, and referral lookup — in under 2 minutes.
Section · 02
Skills
Active Directoryamazon web servicesauditscisspChange ManagementCCSPAzure ADCompliance MonitoringCloudflareCapital Marketsdeploymentauthentication protocolscloudCloud SecurityAzure SecurityArchitectureCiscocomplianceMicrosoft Azure
Section · Company
About Ernst & Young
Ernst Young
Management Consulting
44k+
employees
2002
24 years old
Gurgaon / Gurugram, Haryana
India
₹15.3L PA avg
Avg at Ernst & Young
About
At EY, our purpose is Building a better working world. The insights and quality services we provide help build trust and confidence in the capital markets and in economies the world over.
Industries
Management Consulting
Employee ratings
10 reviews
3.4/ 5
Culture
1.9
Career growth
2.3
Work-life
2.5
Employees rate it well for
Job Security36Skill Development35
Find them on