Zscaler Senior Engineer

Job Location- Pune/ Chennai

Experience Range- 6-12 Years

Summary

As a Senior Network Security / ZTNA Engineer, you are responsible and play a critical role in designing, implementing and managing network secure access to applications by verifying users and devices, enforcing least-privilege access, micro-segmenting networks, and continuously monitoring for threats, focusing on identity-based policies across regions.

Core responsibilities

\n
• Understand Internet and Private Access (ZTNA) Requirements. Define Network Security / ZTNA standards, policies and procedures.
\n
• Produce detailed design documents and guide the implementation of features
\n
• Design the integration touch points of Internet and Private Access (IdP, firewalls, SD-WAN, EUC, SIEM, Log, Server Teams) and coordinate with respective groups
\n
• Deploy and manage ZTNA platforms to secure access to private apps
\n
• Configure strong authentication (MFA) and authorization policies based on user/device identity
\n
• Grant users access only to necessary applications, not the entire network
\n
• Isolate network segments to prevent lateral movement by attackers
\n
• Continuously assess device security (OS, antivirus status) before granting access.
\n
• Define and enforce granular, context-aware policies (user, location, time, device).
\n
• Create and implement test plans (including functionality, integrity, stress testing and definition of test methodologies and strategy)
\n
• Monitor user and device activity for threat anomalies and adapt security posture in real-time.
\n
• Involve in troubleshooting and complex problem resolutions
\n
• Troubleshooting GRE/IPSec tunnels related to users access
\n
• Guide and Coach teammates technically
\n
• Create and maintain documentation and diagrams
\n

Required Qualifications

\n
• Must have implementation experience in one of the ZTNA/SSE technologies (Zscaler, Netskope, Prisma Access, Cloudflare)
\n
• Or Must have implementation experience in one of the Network Security Firewalls (Palo alto, Forti, Juniper, Cisco ASA, Checkpoint) and/or Routing, Switching, Wireless (WAP,WLC)
\n
• Bachelor's degree in technical or engineering, or computer science or equivalent experience
\n
• 6+ years of experience supporting network and network security environments.
\n
• Deep understanding of Zero Trust (ZTNA) and SASE concepts and architectures.
\n
• Strong grasp of networking fundamentals (TCP/IP, DNS, HTTP, routing) and hybrid cloud architectures (Azure, AWS, GCP).
\n
• Hands-on experience with security technologies like Secure Web Gateway (SWG), CASB, DLP, firewalls, and VPN alternatives.
\n
• Ability to work in a fast-paced, high pressure, constantly changing environment.
\n
• Experience in managing and driving complex global and regional projects with multiple functional teams
\n
• Experience in security practices and methodologies including SSL/TLS encryption, Sandbox and Advanced threat protections.
\n
• Knowledge and Experience in Authentication concepts of users (SAML, MFA and SSO).
\n
• Certification and/or training with vendor-neutral or vendor-specific focus
\n
• Excellent written and oral communication skills to technical and non-technical staff
\n
• Excellent time management and organization skills
\n