Lead Network Security Engineer - ZTNA

IDFC FIRST Bank; Mumbai; On-site; INR 1,500,000 - 2,000,000; Full time

Job summary

IDFC FIRST Bank is looking for a Lead Network Security Engineer – ZTNA & Zero Trust Access with over 10 years of experience to design and operate identity-driven access controls in a regulated banking environment. The candidate must have hands-on experience with ZTNA architectures, strong communication skills, and a solid understanding of cloud security principles. This role requires expertise in implementing secure access solutions for users, vendors, and applications across both on-prem and cloud environments.

Qualifications

• 10+ years of experience in network security roles.
• Hands-on experience with networking protocols such as HTTP, HTTPS, DNS.
• Experience operating security controls in regulated environments.

Responsibilities

• Design and implement ZTNA-based access models for internal users.
• Monitor ZTNA access logs and integrate with SIEM workflows.
• Ensure ZTNA implementation aligns with regulatory requirements.

Skills

Implementing ZTNA / Zero Trust access architectures

Identity-based access, authentication, and authorization models

Network fundamentals troubleshooting

Cloud security principles

Communication skills

Education

Certifications in network security (e.g., CCSP, CISSP, CompTIA Security+)

Job description

Lead Network Security Engineer – ZTNA & Zero Trust Access

Experience: 10+ years

Employment Type: Full-time

Role Overview: We are seeking a Lead Network Security Engineer – ZTNA & Zero Trust Access to design and operate identity-driven access controls in a regulated banking environment. This role focuses on Zero Trust Network Access (ZTNA) for users, vendors, and applications, while working closely with teams responsible for SWG, firewalls, and Web/API Protection.

Key Responsibilities

Primary Focus – ZTNA

• Design and implement ZTNA-based access models for internal users, third parties, and partners.
• Reduce dependency on traditional VPNs by deploying identity‑aware, device‑aware access controls.
• Integrate ZTNA with identity providers, endpoint posture, and risk‑based access policies.
• Support secure access to on‑prem and cloud‑hosted applications.

Security Operations & Governance

• Monitor ZTNA access logs and anomalies; integrate with SIEM and SOC workflows.
• Participate in incident response related to unauthorized access or identity misuse.
• Ensure ZTNA implementation aligns with regulatory and audit requirements.
• Maintain architecture documentation and SOPs.

Required Skills

• Hands‑on experience implementing ZTNA / Zero Trust access architectures.
• Strong understanding of identity‑based access, authentication, and authorization models.
• Knowledge of network fundamentals to troubleshoot access and connectivity issues.
• Ability to troubleshoot network and security issues in complex environments.
• Strong understanding of cloud security principles, including SaaS, IaaS, and PaaS.
• Knowledge of security frameworks such as ISO 27001, NIST, or GDPR is a plus.
• Hands‑on experience with networking protocols such as HTTP, HTTPS, DNS, and TCP/IP.
• Strong communication skills and the ability to collaborate with teams across various functions.
• Certifications in network security (e.g., CCSP, CISSP, CompTIA Security+, or equivalent) are a plus.
• Experience operating security controls in regulated environments.

Good to Have

• Exposure to Secure Web Gateway (SWG) platforms.
• Understanding of network firewalls and perimeter security.
• Familiarity with Web & API Protection / WAF.
• Experience with endpoint posture, EDR, and device trust models.
• Awareness of SASE / SSE architectures.