Sr. Network Security Engineer with ZTNA

Birlasoft; Bengaluru; On-site; INR 3,000,000 - 7,000,000; Full time

Job summary

Birlasoft is seeking a Senior Network Security Engineer specializing in ZTNA to design and deploy Zero Trust solutions. The role focuses on implementing ZIA/ZPA and Axis Security across global environments, replacing legacy VPN with identity-aware access.

Responsibilities include integrating with IAM, SIEM/SOAR, and EDR/XDR tools, and driving least-privilege access models. 8–11 years' experience required; Bangalore-based on-site role.

Qualifications

• 8–11 years of experience in network security engineering.
• Hands-on with ZTNA and SSE/SASE implementations.
• Experience with ZIA, ZPA, Axis Security.
• VPN-to-ZTNA migration experience preferred.

Responsibilities

• Translate strategic objectives into enterprise security architecture and Zero Trust designs.
• Develop and support global Zero Trust and SSE strategy.
• Lead architecture and deployment of enterprise-scale ZTNA solutions across on-prem, cloud, and hybrid environments.
• Lead migration programs from VPN to ZTNA with minimal disruption.

Skills

ZTNA design

Zscaler ZIA

Zscaler ZPA

Axis Security

SSE/SASE

Zero Trust Architecture

Identity integration

SIEM/SOAR

EDR/XDR

Firewall design

Education

Bachelor's degree in CS/IT or related field

Tools

Fortinet

Palo Alto Networks

Juniper

Zscaler

Azure AD

Job description

Area(s) of responsibility

Skills

Senior Network Security Engineer – ZTNA (Zscaler, Axis/ SSE Focus)

Experience

8-11 years

Location

Bangalore Only

Key Responsibilities

• Translate strategic business objectives into enterprise security architecture and Zero Trust access designs.
• Develop and support solutions aligned global Zero Trust and Secure Access Service Edge (SASE) strategy.
• Lead architecture and deployment of enterprise-scale ZTNA solutions across global environments (on-prem, cloud, hybrid).

ZTNA & Zero Trust Responsibilities (Primary Focus)

• Architect, design, and implement Zero Trust Network Access (ZTNA) solutions using:
  • Zscaler (ZIA, ZPA)
  • Axis Security / Aruba SSE
• Replace legacy VPN architectures with identity-aware, application-level secure access.
• Design and enforce least-privilege access models based on:
  • User identity
  • Device posture
  • Application context
• Integrate ZTNA with:
  • Identity providers (Azure AD, Okta, etc.)
  • Endpoint security tools (EDR/XDR)
  • SIEM/SOAR platforms
• Drive application segmentation and access policies aligned with Zero Trust principles.
• Collaborate with application and infrastructure teams to onboard applications into ZTNA platforms.
• Design secure access for internet-bound (ZIA) and private application access (ZPA/Axis) use cases.
• Implement policy tuning, traffic steering, and user experience optimization for ZTNA environments.
• Lead migration programs from VPN → ZTNA, ensuring minimal disruption and improved security posture.

ZTNA / SASE / SSE Expertise (Mandatory)

• Hands-on experience implementing and managing:
  • Zscaler Internet Access (ZIA)
  • Zscaler Private Access (ZPA)
  • Axis Security / Aruba SSE platform
• Strong understanding of:
  • Zero Trust Architecture (ZTA)
  • SASE / SSE frameworks
• Expertise in:
  • Secure web gateway (SWG)
  • Cloud-delivered firewall
  • CASB/DLP integrations
• Experience in identity integration (Azure AD, SAML, OAuth, MFA enforcement).
• Strong knowledge of user experience optimization in cloud security platforms.

Network Security & Infrastructure

• Strong experience in:
  • Firewalls (Fortinet, Palo Alto, Juniper)
  • IDS/IPS, VPN, SIEM, NAC
• Deep expertise in:
  • Firewall rule design, NAT, routing, application-aware policies)
• Design and implementation of:
  • WAAP (Web Application & API Protection) solutions