Zscaler Senior Engineer

Job Location- Pune/ Chennai

Experience Range- 6-12 Years

Summary

As a Senior Network Security / ZTNA Engineer, you are responsible and play a critical role in designing, implementing and managing network secure access to applications by verifying users and devices, enforcing least-privilege access, micro-segmenting networks, and continuously monitoring for threats, focusing on identity-based policies across regions.

Core responsibilities

• Understand Internet and Private Access (ZTNA) Requirements. Define Network Security / ZTNA standards, policies and procedures.
• Produce detailed design documents and guide the implementation of features
• Design the integration touch points of Internet and Private Access (IdP, firewalls, SD-WAN, EUC, SIEM, Log, Server Teams) and coordinate with respective groups
• Deploy and manage ZTNA platforms to secure access to private apps
• Configure strong authentication (MFA) and authorization policies based on user/device identity
• Grant users access only to necessary applications, not the entire network
• Isolate network segments to prevent lateral movement by attackers
• Continuously assess device security (OS, antivirus status) before granting access.
• Define and enforce granular, context-aware policies (user, location, time, device).
• Create and implement test plans (including functionality, integrity, stress testing and definition of test methodologies and strategy)
• Monitor user and device activity for threat anomalies and adapt security posture in real-time.
• Involve in troubleshooting and complex problem resolutions
• Troubleshooting GRE/IPSec tunnels related to users access
• Guide and Coach teammates technically
• Create and maintain documentation and diagrams

Required Qualifications

• Must have implementation experience in one of the ZTNA/SSE technologies (Zscaler, Netskope, Prisma Access, Cloudflare)
• Or Must have implementation experience in one of the Network Security Firewalls (Palo alto, Forti, Juniper, Cisco ASA, Checkpoint) and/or Routing, Switching, Wireless (WAP,WLC)
• Bachelor's degree in technical or engineering, or computer science or equivalent experience
• 6+ years of experience supporting network and network security environments.
• Deep understanding of Zero Trust (ZTNA) and SASE concepts and architectures.
• Strong grasp of networking fundamentals (TCP/IP, DNS, HTTP, routing) and hybrid cloud architectures (Azure, AWS, GCP).
• Hands-on experience with security technologies like Secure Web Gateway (SWG), CASB, DLP, firewalls, and VPN alternatives.
• Ability to work in a fast-paced, high pressure, constantly changing environment.
• Experience in managing and driving complex global and regional projects with multiple functional teams
• Experience in security practices and methodologies including SSL/TLS encryption, Sandbox and Advanced threat protections.
• Knowledge and Experience in Authentication concepts of users (SAML, MFA and SSO).
• Certification and/or training with vendor-neutral or vendor-specific focus
• Excellent written and oral communication skills to technical and non-technical staff
• Excellent time management and organization skills