Zscaler & Microsoft Security Cloud Network Security Engineer - AVP (Bengaluru)

ToCumulus; Bengaluru; On-site; INR 1,500,000 - 2,100,000; Full time

Job summary

ToCumulus in Bengaluru seeks an experienced Cloud Network Security Engineer with strong Zscaler, Microsoft Entra, and Azure Networking expertise. You will design, implement, and support secure cloud and hybrid networks, troubleshoot complex connectivity and security issues, and contribute to cloud transformation initiatives.

The role emphasizes hands-on work with ZIA/ZPA, Entra ID integration, SSE/SASE/ZTNA concepts, and Azure networking components such as VNets, ExpressRoute, and firewall/casb

Qualifications

• Hands-on experience designing and supporting secure cloud/hybrid networks.
• Strong understanding of SSE, SASE, ZTNA, SWG, and CASB.
• Experience troubleshooting enterprise connectivity and security issues.

Responsibilities

• Design, implement, configure, and support Zscaler Internet Access (ZIA) and Zscaler Private Access (ZPA).
• Implement and manage Microsoft Entra Internet/Private Access.
• Design and support SSE, SASE, ZTNA, SWG, CASB, and Zero Trust architectures.
• Integrate with Microsoft Entra ID (SAML, SCIM, MFA, Conditional Access).
• Configure integrations with Defender for Cloud Apps/Endpoint.
• Handle SSL/TLS inspection, PAC files, proxy chaining, traffic forwarding, and policy-based access controls.
• Design and support Azure networking: VNets, VNet Peering, NSGs, Route Tables, Azure Firewall, Private Endpoints, DNS, Virtual WAN.
• Support Azure ExpressRoute deployment, monitoring, operations.
• Work with enterprise networking tech: TCP/IP, DNS, DHCP, routing, switching, VLANs, NAT, VPN, load balancing.
• Configure Cisco routing/switching environments and enterprise firewalls (Palo Alto, Fortinet, Check Point, Cisco Firepower).
• Troubleshoot network/security with the listed tools and platforms.

Skills

Cloud networking

Zero Trust

SASE

ZTNA

Security architecture

Troubleshooting

Tools

Zscaler (ZIA/ZPA)

Microsoft Entra

Azure Networking

Azure ExpressRoute

Azure Firewall

CASB

Defender for Cloud Apps/Endpoint

Firewall platforms (Palo Alto/Cisco)

Job description

Job Summary:

We are looking for an experienced Cloud Network Security Engineer with solid expertise in Zscaler, Microsoft Entra, Azure Networking, Zero Trust, and enterprise network security. The ideal candidate will have hands‑on experience designing, implementing, and supporting secure cloud and hybrid network environments, with a strong understanding of SASE, SSE, ZTNA, Secure Web Gateway, CASB, and Zero Trust security architectures. The role will involve working with enterprise‑scale security and networking technologies, troubleshooting complex connectivity and security issues, and supporting cloud transformation initiatives.

Key Responsibilities:

• Design, implement, configure, and support Zscaler Internet Access (ZIA) and Zscaler Private Access (ZPA) solutions.
• Implement and manage Microsoft Global Secure Access, Microsoft Entra Internet Access, and Microsoft Entra Private Access.
• Design and support SSE, SASE, ZTNA, SWG, CASB, Cloud Firewall, and Zero Trust Security architectures.
• Integrate security solutions with Microsoft Entra ID, including SAML, SCIM, MFA, and Conditional Access.
• Configure and support integrations with Microsoft Defender for Cloud Apps and Microsoft Defender for Endpoint.
• Implement and troubleshoot SSL/TLS inspection, PAC files, proxy chaining, traffic forwarding, and policy‑based access controls.
• Design, configure, and support Azure networking environments, including VNets, VNet Peering, NSGs, Route Tables, Azure Firewall, Private Endpoints, DNS Services, and Virtual WAN.
• Support Azure ExpressRoute deployment, configuration, monitoring, and operations.
• Work with enterprise networking technologies including TCP/IP, DNS, DHCP, routing, switching, VLANs, NAT, VPN, and load balancing.
• Configure and troubleshoot Cisco enterprise routing and switching environments.
• Work with enterprise firewall platforms such as Palo Alto, Fortinet, Check Point, Cisco Firepower, or equivalent technologies.
• Perform network and security troubleshooting using pack .