Senior Network Security Engineer

Job description

**Summary** As a Senior Network Security / ZTNA Engineer, you are responsible and play a critical role in designing, implementing and managing network secure access to applications by verifying users and devices, enforcing least-privilege access, micro-segmenting networks, and continuously monitoring for threats, focusing on identity-based policies across regions. **Core responsibilities** - Understand Internet and Private Access (ZTNA) Requirements. Define Network Security / ZTNA standards, policies and procedures. - Produce detailed design documents and guide the implementation of features - Design the integration touch points of Internet and Private Access (IdP, firewalls, SD-WAN, EUC, SIEM, Log, Server Teams) and coordinate with respective groups - Deploy and manage ZTNA platforms to secure access to private apps - Configure strong authentication (MFA) and authorization policies based on user/device identity - Grant users access only to necessary applications, not the entire network - Isolate network segments to prevent lateral movement by attackers - Continuously assess device security (OS, antivirus status) before granting access. - Define and enforce granular, context-aware policies (user, location, time, device). - Create and implement test plans (including functionality, integrity, stress testing and definition of test methodologies and strategy) - Monitor user and device activity for threat anomalies and adapt security posture in real-time. - Involve in troubleshooting and complex problem resolutions - Troubleshooting GRE/IPSec tunnels related to users access - Guide and Coach teammates technically - Create and maintain documentation and diagrams **Required Qualifications** - Must have implementation experience in one of the ZTNA/SSE technologies (Zscaler, Netskope, Prisma Access, Cloudflare) - Or Must have implementation experience in one of the Network Security Firewalls (Palo alto, Forti, Juniper, Cisco ASA, Checkpoint) and/or Routing, Switching, Wireless (WAP,WLC) - Bachelor's degree in technical or engineering, or computer science or equivalent experience - 6+ years of experience supporting network and network security environments. - Deep understanding of Zero Trust (ZTNA) and SASE concepts and architectures. - Strong grasp of networking fundamentals (TCP/IP, DNS, HTTP, routing) and hybrid cloud architectures (Azure, AWS, GCP). - Hands-on experience with security technologies like Secure Web Gateway (SWG), CASB, DLP, firewalls, and VPN alternatives. - Ability to work in a fast-paced, high pressure, constantly changing environment. - Experience in managing and driving complex global and regional projects with multiple functional teams - Experience in security practices and methodologies including SSL/TLS encryption, Sandbox and Advanced threat protections. - Knowledge and Experience in Authentication concepts of users (SAML, MFA and SSO). - Certification and/or training with vendor-neutral or vendor-specific focus