Senior Network Engineer

Overview

Senior Network Engineer to design, implement and operate the Enterprise Remote Access (ERA) platform, focused on Zero Trust, VPN modernization and secure remote access solutions for employees globally.

What you'll do

• Design and implement robust, cost-effective Remote Access solutions using emerging technologies.
• Develop and manage an engineering plan based on provided architectural documents.
• Document and communicate engineering and operational deliverables.
• Manage product lifecycle.
• Assist with evaluation and engineering of software products and technologies, and provide recommendations on selection and adoption backed by analysis and justification.
• Assist with pilots for new products and technologies, analyse their value and impact from a technical perspective, and communicate results and recommendations.
• Act as an active advisor for operational processes and policies mandated by the enterprise.
• Provide operational support on current Remote Access solutions such as Ivanti/Pulse and Zscaler Private Access VPN technologies.
• Serve as 3rd level engineering escalation, assisting in troubleshooting remote access issues.
• Work closely with EI support partners to ensure availability of Remote Access infrastructure.
• Design and deploy ZPA application segments with least-privilege access policies, eliminating implicit trust and reducing lateral movement risk.
• Architect and deliver enterprise Zscaler solutions, supporting migration from legacy VPN technologies to Zscaler Private Access (ZPA) cloud infrastructure.
• Deploy, configure and optimize Zscaler Client Connector (ZCC, ZIA, ZPA) policies and secure access controls across enterprise endpoints, resolving complex policy enforcement and connectivity issues.
• Engineer and deploy highly available ZPA App Connectors and Network connectors with redundancy, failover and scalable secure connectivity for private enterprise applications.
• Architect secure connectivity for private data center applications, defining access policies, traffic routing, authentication flows and security controls for resilient hybrid-cloud application access.
• Execute end-to-end validation of application connectivity, traffic flows, authentication and policy enforcement to ensure successful production onboarding.
• Collaborate with network, infrastructure and security teams to deliver enterprise security initiatives and troubleshoot deployment challenges.
• Perform advanced L3–L7 troubleshooting across TCP/IP, DNS, HTTP/S, SSL/TLS and proxy traffic using Wireshark.
• Participate in customer-facing troubleshooting and root cause analysis for proxy, authentication and secure access issues.
• Collaborate with cross-functional teams to improve security posture through granular access controls, DLP policy validation and secure browser access strategies.
• Configure and manage Application Delivery Controllers (ADCs) and load-balancing technologies.
• Perform infrastructure automation and network scripting using Python, Ansible or equivalent toolsets.
• Tune infrastructure performance and optimize configuration for highly segmented traffic.
• Design network segmentation and recovery planning infrastructure, including Layer 2 through Layer 7 segmentation frameworks (VLANs, VRFs, micro-segmentation).
• Work with Software-Defined Networking (SDN) and automated micro-segmentation deployment strategies.
• Design end-to-end traffic isolation policies and enterprise-wide security policy enforcement.
• Integrate segmentation controls with Next-Gen Firewalls, IDS/IPS, SIEM, EDR and NAC platforms.
• Architect hybrid-cloud segmentation blueprints across AWS, Azure or on-premises environments.
• Implement Zero Trust Network Access (ZTNA) frameworks to reduce lateral attack surfaces (ZIA, ZPA, ZDX).
• Apply cryptography and data protection practices, including PKI, certificate lifecycle management, OS key stores, and symmetric/asymmetric encryption and hashing.
• Ensure operational excellence, service availability and business continuity through resiliency planning, failover design and disaster recovery solutions.

What you'll need

• 6–8 years of total IT experience, with a strict minimum of 5 years dedicated to engineering core network segmentation, traffic isolation models and Zscaler Private Access (ZPA) VPN solutions.
• Bachelor of Engineering (B.E.) or Bachelor of Technology (B.Tech) in Computer Science, Information Technology, Electronics or a related technical stream.
• Proven hands-on track record in business continuity infrastructure, failover design and infrastructure recovery planning and design.
• Advanced expertise in enterprise network segmentation and recovery planning design infrastructure.
• Hands-on engineering of Layer 2 through Layer 7 segmentation frameworks (VLANs, VRFs, micro-segmentation).
• Proven mastery of Software-Defined Networking (SDN) and automated micro-segmentation deployment strategies.
• Designing end-to-end traffic isolation policies and enterprise-wide security policy enforcement.
• Integrating segmentation controls with Next-Gen Firewalls, IDS/IPS, SIEM, EDR and NAC platforms.
• Architecting hybrid-cloud segmentation blueprints across AWS, Azure or on-premises environments.
• Practical implementation of Zero Trust Network Access (ZTNA) frameworks (ZIA, ZPA, ZDX).
• Deep engineering knowledge of secure enterprise Remote Access and Zscaler Private Access (ZPA) VPN solutions.
• Comprehensive understanding of Public Key Infrastructure (PKI), Certificate Authorities and enterprise certificate lifecycle management.
• Mastery of operating system key stores, including CryptoAPI (CAPI), macOS Keychain, key escrow and key history.
• Deep theoretical and practical knowledge of symmetric/asymmetric encryption and cryptographic hashing algorithms.
• Strong familiarity with endpoint web security suites and identity verification systems.
• Strong analytical mindset focused on data-driven technology evaluation and product justification.
• Excellent cross-functional communication skills to articulate technical security frameworks to diverse stakeholders.
• Proactive technical leadership capable of managing Tier-3 incident escalations under pressure.

Nice to have

• ITIL Foundation or formal IT Service Management (ITSM) certification.
• Understanding of AI/ML concepts and their application in network operations, security monitoring and predictive analytics.
• Experience with AI-driven Network Operations (AIOps) platforms for event correlation, anomaly detection and automated incident remediation.
• Awareness of emerging AI-driven capabilities in Zero Trust Network Access (ZTNA), Secure Access Service Edge (SASE) and Enterprise Remote Access solutions.

Details

• Location: Bangalore – EGL / Chennai (Embassy Manyata Business Park, Bangalore, India).
• Shift timings: rotational coverage windows including 2:00 PM – 11:00 PM IST and 5:30 PM – 2:30 AM IST to ensure overlap with global teams.