Associate Director - Network Security in Bengaluru, India

Security Technology Services - Network Security TechnologyEY TechnologyTechnology has always been at the heart of what we do and deliver at EY. We need technology to keep an organization the size of ours working efficiently and securely. We have more than 400,000 people in over 150 countries, all of whom rely on secure technology to perform their jobs every https://jobeax.com/link/wXHoVWZqo5JfgYgN we use as a firm depends on our security-first mindset. Our users, applications, cloud platforms, data centers, AI services, and business-critical systems all rely on modern security technologies to enable secure access, protect sensitive information, and reduce cyber https://jobeax.com/link/qy9GBtWRyOk5EEte Security Technology Services, our mission is to deliver world-class security engineering capabilities that enable Zero Trust, cloud transformation, attack surface reduction, and secure digital experiences. If you are passionate about building and engineering security solutions at global scale, we want to hear from https://jobeax.com/link/ptMbutYZDU5IVrK9 OpportunityWe are looking for a Principal Engineer - Associate Director to join Security Technology Services as a senior hands-on engineering leader focused on Zscaler, Zero Trust and secure cloud networking https://jobeax.com/link/8YlP9HZq6U2Vl2YJ role is responsible for engineering, deployment, integration, automation, optimization and technical leadership of EY's global Zscaler platform and associated network security https://jobeax.com/link/U4RNKsn6VBUKUhWj successful candidate will operate as a deeply technical, hands-on subject matter expert across core Zscaler cloud capabilities, ZPA, Zscaler Client Connector, workload segmentation, Azure secure networking concepts, hybrid data center connectivity, Zscaler AI Firewall, AI Guard and Zero Trust access https://jobeax.com/link/Mw4zVUkJvgnLO5ZB role will lead strategic engineering initiatives focused on:- Azure secure networking integration- Hybrid cloud security- VMware data center segmentation- Enterprise AI security using Zscaler AI Firewall and AI Guard- Secure access transformationThe role will work closely with Network Security, Cloud Engineering, Application Security, Identity, Infrastructure, Architecture, and Product teams to engineer and deploy scalable enterprise security solutions https://jobeax.com/link/7Y7VBqDDCFcwpIS1 Key ResponsibilitiesThe Zscaler and Zero Trust Engineering Lead will provide senior technical leadership for the deployment, integration, optimization and continuous improvement of EY's global secure access and Zero Trust engineering https://jobeax.com/link/BsZ88IjtKIrmrfUL Engineering Leadership:- Serve as the senior hands-on engineering lead for core Zscaler cloud capabilities, including ZIA, ZPA, Zscaler Client Connector, App Connectors, Private Service Edges, Workload Communications, Microsegmentation, Zscaler AI Firewall and AI Guard.- Engineer, deploy, configure and optimize large-scale Zscaler solutions supporting global business operations.- Lead onboarding of enterprise applications, cloud services and business workloads into Zero Trust architectures.- Drive adoption of new Zscaler capabilities and engineering best practices.- Develop reference configurations, reusable engineering patterns and deployment https://jobeax.com/link/STOwm4hFpVwPB1ep Secure Networking Integration:- Bring deep working knowledge of Azure secure networking patterns to support Zscaler integration across EY Azure environments.- Understand, validate and troubleshoot Azure networking components including Virtual WAN, ExpressRoute, Azure Firewall, Application Gateway, Front Door, Private Link and Private Endpoint.- Work with EY Azure architects to integrate Zscaler capabilities with Azure-hosted applications, workloads, AI platforms and infrastructure services.- Translate Azure secure networking requirements into Zscaler engineering patterns, connectivity models and deployment standards.- Partner closely with EY Azure architecture and cloud engineering teams to drive secure Zscaler product integration across Azure https://jobeax.com/link/mYasHVhX4RJ38fgT Trust and Application Access Engineering:- Lead migration of applications from traditional VPN and internet-facing architectures to Zero Trust models using ZPA.- Engineer secure access models for internal users, external users, vendors, contractors and developers.- Implement identity-aware access controls integrated with Entra ID, Conditional Access and device posture solutions.- Engineer secure connectivity solutions for hybrid cloud and multi-cloud environments.- Engineer application segmentation patterns that reduce attack surface and minimize lateral movement https://jobeax.com/link/khE9J9o29c2Si7CG Segmentation Engineering:- Implement workload segmentation solutions across Azure and hybrid environments.- Deploy and manage Zscaler Workload Communications capabilities.- Engineer workload-to-workload and application-to-application segmentation policies.- Secure east-west traffic between business-critical applications and services.- Develop segmentation models for production, non-production, shared services and management https://jobeax.com/link/V5BXBawhaoD1UFqv Center and VMware Security Engineering:- Engineer secure connectivity solutions across traditional data center environments.- Deploy App Connectors and Private Service Edges in VMware-based infrastructure.- Integrate Zscaler technologies with enterprise data center environments.- Support migration of legacy applications into Zero Trust architectures.- Support secure connectivity integration between on-premises data centers, Zscaler platforms and Azure cloud https://jobeax.com/link/vATcBFmARkdcmcNp Automation and Platform Optimization:- Build and maintain automation solutions to improve security engineering efficiency.- Automate deployment, configuration validation and policy management activities.- Utilize Terraform, Python, PowerShell, APIs and Infrastructure-as-Code approaches.- Improve platform scalability, consistency and operational effectiveness through automation.- Participate in development of future-state security engineering https://jobeax.com/link/yaQodIzKMMCOQM3N Leadership:- Serve as the highest level engineering escalation point for complex technical issues.- Lead troubleshooting of networking, routing, DNS, TLS, authentication and connectivity challenges.- Mentor and coach engineers across Network Security Technology.- Participate in architecture reviews, engineering governance and major transformation programs.- Communicate complex technical concepts to engineering, architecture and executive https://jobeax.com/link/sSnUrW7O5gw52OW1 and Attributes for Success:We are interested in candidates who bring deep engineering experience from large global enterprise environments and can combine hands-on technical execution with practical https://jobeax.com/link/Yxv7jCTBi5XFCgVN a successful candidate, you will demonstrate:- Strong hands-on engineering expertise across network security, cloud security and Zero Trust technologies.- Deep troubleshooting and problem-solving capabilities.- Ability to engineer and deploy security solutions at enterprise scale in partnership with platform architecture teams.- Strong understanding of Azure secure networking, hybrid connectivity and cloud security integration patterns.- Experience working across global teams and multiple technology disciplines.- Strong communication and stakeholder management skills.- Passion for automation, innovation and continuous improvement.- Ability to operate effectively in fast-paced and highly complex https://jobeax.com/link/rncQfxaHyPLueRcE Qualify for the Role, You Must Have:- Bachelor's degree in computer science, Information Technology, Engineering or equivalent experience.- 15 - 20 years of Network Security and Security Engineering experience.- 12 - 15 years of experience engineering, deploying or integrating cloud security and Zscaler technologies.- 8 - 10 years leading engineering teams or large engineering initiatives.- Expert-level experience with Zscaler technologies including ZIA and ZPA.- Experience deploying and supporting enterprise-scale Zscaler environments.- Experience implementing Zero Trust solutions and secure access architectures.- Experience onboarding cloud-hosted and on-premises applications into ZPA.- Experience supporting and troubleshooting Azure secure networking environments in partnership with Azure architecture teams.- Experience deploying security solutions within VMware-based data centers.- Strong understanding of TCP/IP, DNS, TLS, routing, BGP, PKI and enterprise networking concepts.- Experience with automation technologies such as Python, Terraform, PowerShell and REST APIs.- Strong English communication skills, both written and https://jobeax.com/link/RzGmQdElFGYxLXab, You'll Also Have:- Deep expertise in Azure Virtual WAN, ExpressRoute, Azure Firewall Premium, Application Gateway, Front Door and Private Link.- Experience deploying Zscaler Workload Communications and workload segmentation solutions.- Experience reducing public IP exposure through Zero Trust architectures.- Experience securing Azure IaaS, PaaS and AKS environments.- Experience integrating Zscaler with Microsoft Entra ID and Conditional Access.- Strong understanding of SASE and SSE security architectures.- Experience securing AI, GenAI and cloud-native workloads using Zscaler AI Firewall and AI Guard.- Zscaler Certifications focused on ZIA, ZPA, Client Connector, workload segmentation, AI Firewall, AI Guard or equivalent hands-on platform engineering credentials.- Azure Network Engineer Associate or Azure Security Engineer certifications.- CISSP, CCSP, CCNP or equivalent certifications. (ref:hirist.tech)