Zscaler & Microsoft Security – Cloud Network Security Engineer - AVP

Theomnihire; Bengaluru; On-site; INR 1,800,000 - 3,000,000; Full time

Job summary

Theomnihire seeks an experienced Cloud Network Security Engineer in Bengaluru to design, deploy, and support secure cloud and hybrid networks. You will work on ZIA/ZPA deployments, Entra access, and enterprise firewall integration while coordinating with security, cloud, and infrastructure teams.

Ideal candidates have hands-on expertise with SSE/SASE, ZTNA, SWG, CASB, and Zero Trust security architectures, and strong knowledge of TCP/IP, DNS, and VPN technologies.

Qualifications

• Hands-on experience with ZIA and ZPA in enterprise networks.
• Solid knowledge of Entra ID, SAML, SCIM, MFA, and CA.
• Expertise in SSE, SASE, ZTNA, SWG, CASB and Zero Trust concepts.
• Experience designing and operating Azure networking (VNets, NSGs, Firewall).
• Familiar with cloud security architectures and hybrid environments.

Responsibilities

• Design, implement, configure, and support ZIA and ZPA solutions.
• Implement and manage Microsoft Global Secure Access and Entra Access.
• Design and support SSE, SASE, ZTNA, SWG, CASB and Zero Trust architectures.
• Integrate security with Entra ID (SAML/SCIM/MFA/CA).
• Configure integrations with Defender for Cloud Apps and Defender for Endpoint.
• Troubleshoot SSL/TLS inspection, PAC files, proxy chaining, and access policies.
• Design and support Azure networking (VNets, VNet Peering, NSGs, DNS, Private Endpoints, WAN).
• Support ExpressRoute deployment, monitoring, and operations.
• Work with TCP/IP, DNS, DHCP, routing, NAT, VPN, and load balancing.
• Troubleshoot Cisco routing/swacing; work with Palo Alto, Fortinet, Check Point, Cisco Firepower.

Skills

Zscaler

Microsoft Entra

Azure Networking

Zero Trust

SASE/SSE

ZTNA

Tools

Zscaler Internet Access (ZIA)

Zscaler Private Access (ZPA)

Microsoft Defender

Cisco Firepower / Firewall tools

Azure ExpressRoute

Job description

We are looking for an experienced Cloud Network Security Engineer with strong expertise in Zscaler, Microsoft Entra, Azure Networking, Zero Trust, and enterprise network security . The ideal candidate will have hands-on experience designing, implementing, and supporting secure cloud and hybrid network environments, with a strong understanding of SASE, SSE, ZTNA, Secure Web Gateway, CASB, and Zero Trust security architectures .

The role will involve working with enterprise-scale security and networking technologies, troubleshooting complex connectivity and security issues, and supporting cloud transformation initiatives.

Key Responsibilities

• Design, implement, configure, and support Zscaler Internet Access (ZIA) and Zscaler Private Access (ZPA) solutions.
  
• Implement and manage Microsoft Global Secure Access, Microsoft Entra Internet Access, and Microsoft Entra Private Access .
  
• Design and support SSE, SASE, ZTNA, SWG, CASB, Cloud Firewall, and Zero Trust Security architectures.
  
• Integrate security solutions with Microsoft Entra ID , including SAML, SCIM, MFA, and Conditional Access.
  
• Configure and support integrations with Microsoft Defender for Cloud Apps and Microsoft Defender for Endpoint .
  
• Implement and troubleshoot SSL/TLS inspection, PAC files, proxy chaining, traffic forwarding, and policy-based access controls .
  
• Design, configure, and support Azure networking environments , including VNets, VNet Peering, NSGs, Route Tables, Azure Firewall, Private Endpoints, DNS Services, and Virtual WAN.
  
• Support Azure ExpressRoute deployment, configuration, monitoring, and operations.
  
• Work with enterprise networking technologies including TCP/IP, DNS, DHCP, routing, switching, VLANs, NAT, VPN, and load balancing .
  
• Configure and troubleshoot Cisco enterprise routing and switching environments.
  
• Work with enterprise firewall platforms such as Palo Alto, Fortinet, Check Point, Cisco Firepower , or equivalent technologies.
  
• Perform network and security troubleshooting using packet captures, traceroute, firewall logs, proxy logs, and security monitoring tools .
  
• Analyze network traffic, identify security or connectivity issues, and implement appropriate remediation.
  
• Collaborate with infrastructure, cloud, security, and application teams to implement secure connectivity solutions.
  
• Participate in large-scale cloud transformation and Zero Trust adoption initiatives .
  
• Ensure security solutions align with enterprise security policies, architecture standards, and operational requirements.
  

Requirements

Mandatory Skills

• Strong hands-on experience with Zscaler Internet Access (ZIA) and Zscaler Private Access (ZPA) .
  
• Experience with Microsoft Global Secure Access, Microsoft Entra Internet Access, and Microsoft Entra Private Access .
  
• Strong understanding of SWG, Cloud Firewall, CASB, SSE, SASE, ZTNA, and Zero Trust Security concepts.
  
• Experience with Microsoft Entra ID, SAML, SCIM, MFA, and Conditional Access .
  
• Experience integrating and monitoring Microsoft Defender for Cloud Apps and Microsoft Defender for Endpoint .
  
• Strong knowledge of SSL/TLS Inspection, PAC Files, Proxy Chaining, Traffic Forwarding, and Policy-Based Access Control .
  
• Strong Azure networking experience with:
  • VNets and VNet Peering
    
  • NSGs and Route Tables
    
  • Azure Firewall
    
  • Private Endpoints
    
  • DNS Services
    
  • Azure Virtual WAN
    
• Hands-on experience with Azure ExpressRoute deployment and operations .
  
• Strong networking fundamentals covering TCP/IP, DNS, DHCP, Routing, Switching, VLANs, NAT, VPN, and Load Balancing .
  
• Strong experience with Cisco networking technologies and enterprise Routing/Switching .
  
• Experience with enterprise firewall platforms such as Palo Alto, Fortinet, Check Point, Cisco Firepower , or equivalent.
  
• Strong troubleshooting skills using packet capture, log analysis, traceroute, firewall logs, proxy logs, and network monitoring tools .
  

Preferred Skills & Certifications

• Zscaler Certified Administrator or Professional certification.
  
• Microsoft security certifications related to Entra, Zero Trust, and Defender technologies .
  
• CCNP Enterprise or CCNP Security .
  
• PCNSE or equivalent firewall certification.
  
• CISSP, CCSP , or equivalent security certification.
  
• Experience in the Banking / Financial Services domain.
  
• Experience working on large-scale cloud transformation and security modernization initiatives.
  

Ideal Candidate Profile

• Strong combination of networking, cloud, and cybersecurity expertise.
  
• Hands-on experience implementing Zscaler and Microsoft security solutions in enterprise environments.
  
• Good understanding of Zero Trust and SASE/SSE architecture .
  
• Strong analytical and troubleshooting skills.
  
• Ability to work across network, security, cloud, and infrastructure teams.
  
• Experience handling enterprise-scale environments and complex technical issues.
  
• Strong communication and stakeholder management skills.