Senior Engineer

Saur Energy International; Pune District; Hybrid; INR 2,500,000 - 4,000,000; Full time

Job summary

Saur Energy International is seeking a senior network security engineer to lead design, implementation and operation of a global security posture. You will own Zscaler ZIA/ZPA, SSL inspection, DLP policies, and SSE migration while coordinating with SecOps and line-of-business partners.

You will oversee Fortinet devices, Imperva WAF, and cloud security controls, drive automation, and participate in security audits and incident response to reduce risk across the organization.

Qualifications

• Deep hands-on Zscaler platform expertise (ZIA/ZPA) and policy design.
• Experience with on-prem and cloud security services and ZDX/microsegmentation.
• Knowledge of Fortinet security suite in production environments.
• Experience with 3rd party vendors and managed networks.
• Strong ITIL-based practices and change management experience.

Responsibilities

• Manage and implement network security infrastructure.
• Act as senior engineer and design authority for Zscaler platform.
• Build and tune ZIA/ZPA policies and migrate users to SSE.
• Configure Fortinet estate and related security controls.
• Oversee Imperva WAF, Guardicore, and geo-blocking controls.
• Design, build, operate and automate security solutions.
• Collaborate with Security team, BRMs, and vendors for timely delivery.
• Lead security incidents response and remediation efforts.
• Conduct regular security audits and address vulnerabilities.
• Drive automation for security infrastructure management.
• Maintain global network security inventory in CMDB.
• Lead Zero Trust program and crown-jewel app segmentation.

Skills

Zscaler expertise

Zero Trust

SIEM experience

Vendor management

Cybersecurity frameworks

Python automation

Cloud security

Communication skills

Education

Bachelor’s degree in CS/Engineering/IS

Tools

Fortinet FortiGate

FortiManager

FortiAnalyzer

Imperva WAF

Guardicore

Zscaler ZDX

Azure

AWS

Zscaler ZIA/ZPA

ServiceNow CMDB

Job description

How you will do it:

• Manage and implement network security infrastructure

• Serve as senior engineer and design authority for the Zscaler platform – ZIA, ZPA, Inline DLP, AI Security (Secure AI Access), Digital Experience (ZDX) and Zscaler Microsegmentation

• Build and tune ZIA/ZPA access policies, SSL inspection, DLP dictionaries and AI Security controls, and lead the migration of users to full SSE capability

• Firewall, IPS/IDS and remote access configuration and rule management across the Fortinet estate (FortiGate, FortiManager, FortiAnalyzer)

• Cloud-based Web Application Firewall (Imperva WAF), microsegmentation and workload protection (Zscaler and Akamai Guardicore), and perimeter/geo-blocking controls

• Design, build, operate and automate security solutions and processes to protect the integrity of the organization's networks, systems, applications and data.

• Work closely with Security team partners/Business Relationship Managers , Field IT leadership and managed service suppliers to ensure successful identification and timely delivery of network security services to the business.

• Participate and consult(in partnership with the Network lifecycle refresh team) the identification, selection and prioritization of security infrastructure refresh components to ensure alignment with risk avoidance, strategic goals and organizational priorities.

• Respond to security incidents, including data breaches, and coordinate with other IT teams to mitigate the impact of any security breaches.

• Conduct regular security audits to identify vulnerabilities in the network and implement measures to address them.

• Partner with IT audit to remediate security gaps in a timley manner.

• Drive and develop automation opportunities for the management of security infrastructure.

• Manage the global Network security infrastrucutre inventory in CMDB.

• Ensure timely quote turnaround for security infrastructure delivery.

• Ensure all network asset data is accurate and support contracts are in place.

• Provide technical leadership and mentorship to engineers and operations staff, set standards and act as an escalation point for complex incidents and designs.

• Lead delivery of the Zero Trust program, including microsegmentation of crown-jewel applications with Zscaler and Guardicore, geo-blocking and reduction of the internet-facing attack surface.

What we look for:

Required

• Deep, hands-on expertise with the Zscaler platform is essential – Zscaler Internet Access (ZIA), Zscaler Private Access (ZPA), Zscaler DLP and Zscaler AI Security (Secure AI Access), including policy design, SSL inspection, App Connectors/Service Edges and tenant administration.

• Strong network infrastructure security background across both on-prem physical components (firewalls, IDS/IPS, remote access) and cloud security services (Zscaler, Azure, AWS), plus experience with Zscaler ZDX and microsegmentation (Zscaler and/or Guardicore).

• Strong knowledge of the Fortinet security suite (FortiGate, FortiManager, FortiAnalyzer) and experience testing and implementing security-related changes in a production environment.

• Experience working with 3rd party vendors and managed network service providers.

• Great organisational skills.

• Strong experience of working on SIEM tools to analyze logs and correlate events.

• Solid understanding of industry standard Cybersecurity Frameworks and compliance requirements

• Experience inEnterprise level network security incidents and change Management process.

• Solid technical understanding of DMZs, security policies, secure application traffic flows, WAF, DDoS protection, SSL offloading and inspection.

• Strong knowledge of Zero Trust Network Architecture

• Experience with private and public cloud providers is a plus, (e.g., AWS, Azure, GCP, Nutanix) particularly in connectivity, availability, resilience, and security.

• Familiarity with service now Ticketing and CMDB is desirable

• Demonstrated capability to take part as lead security engineer in multi-phase / multi-year network projects or programs, leading these projects to successful implementation.

• Strong technical troubleshooting skill.

• Strong vendor management experience.

• Excellent oral and written communication skills to provide clear messages to all levels.

• Demonstrated ability to effectively establish and maintain strategic working relationships with peers and constituents at all levels of the organization.

• Demonstrated analysis and problem solving skills using innovative thinking.

• Knowledge of ITIL based practices.

• Knowledge of Python and automation skills are desirable.

Qualifications

• Bachelor’s degree in Computer Science, Engineering, Information Systems, or other applicable discipline.

• 8+ years of proven, hands-on network security experience at global enterprise organizations, including significant experience owning and operating a Zscaler (ZIA/ZPA) environment at scale.

• Network security Professional level certification preferred (e.g. Zscaler ZDTA/ZCCP/ZCCA, Fortinet NSE, Imperva, etc.); Zscaler certification strongly preferred.

• CISSP, CEH, CISM or CISA certifications is a plus.