Senior Network Security Engineer - Zero Trust Network Access

We are looking for a highly skilled Senior ZTNA Security Engineer to lead the design, implementation, and management of Zero Trust Network Access (ZTNA) solutions for enterprise environments. The ideal candidate will have extensive experience with Zscaler, Axis Security/Aruba SSE, and Zero Trust architectures, driving the organization's transition from traditional VPN-based remote access to modern identity-driven security models.Key Responsibilities:- Design, implement, and manage enterprise ZTNA (Zero Trust Network Access) solutions.- Lead migration initiatives from traditional VPN infrastructure to ZTNA-based secure access.- Deploy and manage Zscaler Internet Access (ZIA), Zscaler Private Access (ZPA), and Axis Security/Aruba SSE platforms.- Implement identity-aware access controls based on user identity, device posture, and application context.- Enforce least-privilege access policies aligned with Zero Trust principles.- Integrate ZTNA solutions with Identity Providers (Azure AD, Okta, Ping Identity, etc.), SIEM platforms, and enterprise security tools.- Design secure access architectures across on-premises, cloud, and edge environments.- Conduct security architecture reviews, risk assessments, and compliance activities.- Monitor, troubleshoot, and optimize secure remote access solutions.- Collaborate with cybersecurity, infrastructure, and application teams to strengthen enterprise security posture.- Support security audits, incident response, and continuous improvement initiatives.Required Skills & Qualifications:- 10+ years of experience in Network Security Engineering.- Strong hands-on experience with:1. Zscaler Internet Access (ZIA)2. Zscaler Private Access (ZPA)3. Axis Security / Aruba SSE- Deep understanding of:1. Zero Trust Architecture (ZTA)2. Zero Trust Network Access (ZTNA)3. Secure Access Service Edge (SASE)4. Identity and Access Management (IAM)- Experience migrating enterprise VPN environments to ZTNA platforms.- Strong knowledge of:1. Enterprise Firewalls2. Secure Proxy Technologies3. SIEM Platforms4. Identity Federation (SAML, OAuth, OIDC)- Experience securing cloud environments across AWS, Azure, and GCP.- Excellent troubleshooting, analytical, and problem-solving skills.- Strong communication and stakeholder management abilities.Preferred Qualifications:- Bachelor's degree in Computer Science, Information Technology, Cyber Security, or a related field.- Industry certifications such as:1. CCNP / CCIE2. Zscaler Certified Professional (ZCP)3. CISSP4. CISM- Experience implementing enterprise Zero Trust transformation initiatives.- Familiarity with modern cloud security and hybrid workforce security architectures. (ref:hirist.tech)