Senior Engineer - Network

Overview

Senior, hands-on technical lead and subject matter expert for the global Enterprise Security estate, with a strong emphasis on the Zscaler platform underpinning JCI's Zero Trust program.

What you'll do

• Serve as senior engineer and design authority for the Zscaler platform, including ZIA, ZPA, Inline DLP, AI Security (Secure AI Access), Digital Experience (ZDX) and Zscaler Microsegmentation.
• Build and tune ZIA/ZPA access policies, SSL inspection, DLP dictionaries and AI Security controls, and lead the migration of users to full SSE capability.
• Manage firewall, IPS/IDS and remote access configuration and rule management across the Fortinet estate (FortiGate, FortiManager, FortiAnalyzer).
• Manage cloud-based Web Application Firewall (Imperva WAF), microsegmentation and workload protection (Zscaler and Akamai Guardicore), and perimeter/geo-blocking controls.
• Design, build, operate and automate security solutions and processes to protect the integrity of the organization's networks, systems, applications and data.
• Work with Security team partners, Business Relationship Managers, Field IT leadership and managed service suppliers to identify and timely deliver network security services to the business.
• Participate and consult, in partnership with the Network lifecycle refresh team, on the identification, selection and prioritization of security infrastructure refresh components.
• Respond to security incidents, including data breaches, and coordinate with other IT teams to mitigate impact.
• Conduct regular security audits to identify vulnerabilities in the network and implement measures to address them.
• Partner with IT audit to remediate security gaps in a timely manner.
• Drive and develop automation opportunities for the management of security infrastructure.
• Manage the global network security infrastructure inventory in CMDB, ensure all network asset data is accurate, and ensure support contracts are in place.
• Ensure timely quote turnaround for security infrastructure delivery.
• Provide technical leadership and mentorship to engineers and operations staff, set standards, and act as escalation point for complex incidents and designs.
• Lead delivery of the Zero Trust program, including microsegmentation of crown-jewel applications with Zscaler and Guardicore, geo-blocking and reduction of the internet-facing attack surface.

What you'll need

• Deep, hands-on expertise with the Zscaler platform, including ZIA, ZPA, Zscaler DLP and Zscaler AI Security (Secure AI Access), covering policy design, SSL inspection, App Connectors/Service Edges and tenant administration.
• Strong network infrastructure security background across on-prem physical components (firewalls, IDS/IPS, remote access) and cloud security services (Zscaler, Azure, AWS), plus experience with Zscaler ZDX and microsegmentation (Zscaler and/or Guardicore).
• Strong knowledge of the Fortinet security suite (FortiGate, FortiManager, FortiAnalyzer) and experience testing and implementing security-related changes in a production environment.
• Experience working with 3rd party vendors and managed network service providers.
• Strong experience working on SIEM tools to analyze logs and correlate events.
• Solid understanding of industry standard Cybersecurity Frameworks and compliance requirements.
• Experience in enterprise level network security incident and change management processes.
• Solid technical understanding of DMZs, security policies, secure application traffic flows, WAF, DDoS protection, SSL offloading and inspection.
• Strong knowledge of Zero Trust Network Architecture.
• Demonstrated capability to take part as lead security engineer in multi-phase / multi-year network projects or programs, leading them to successful implementation.
• Strong technical troubleshooting skill, strong vendor management experience, and great organisational skills.
• Excellent oral and written communication skills, and demonstrated ability to establish and maintain strategic working relationships at all levels.
• Demonstrated analysis and problem solving skills using innovative thinking.
• Bachelor's degree in Computer Science, Engineering, Information Systems, or other applicable discipline.
• 8+ years of proven, hands-on network security experience at global enterprise organizations, including significant experience owning and operating a Zscaler (ZIA/ZPA) environment at scale.

Nice to have

• Experience with private and public cloud providers (e.g., AWS, Azure, GCP, Nutanix), particularly in connectivity, availability, resilience, and security.
• Familiarity with ServiceNow ticketing and CMDB.
• Network security professional level certification (e.g. Zscaler ZDTA/ZCCP/ZCCA, Fortinet NSE, Imperva, etc.); Zscaler certification strongly preferred.
• CISSP, CEH, CISM or CISA certification.
• Knowledge of ITIL based practices.
• Knowledge of Python and automation skills.

Details

• Location: Pune/Bangalore.