Description

You will engineer and manage enterprise network security solutions focusing on Secure Service Edge (SSE) and Zero Trust principles.

Responsibilities

• Orchestrate and configure security policies across SSE/SASE platforms like Palo Alto Prisma Access, Fortinet Universal ZTNA, and Zscaler ZIA/ZPA.
• Design and tune access control policies, URL filtering, and application control rules for data protection.
• Implement redundant tunnels and failover strategies to ensure high availability in SSE environments.
• Develop Python/Ansible/Terraform scripts to automate policy deployment and compliance checks.
• Integrate security telemetry into Splunk or QRadar for advanced threat analysis and automated response.

Required Skills

• 8–12 years in enterprise network and security engineering, including 3+ years in SSE/SASE design and operations.
• Expert configuration of SSE/SASE platforms (Palo Alto Prisma Access, Fortinet ZTNA, Zscaler ZIA/ZPA).
• Deep knowledge of Zero Trust architecture, identity-aware segmentation, and cloud-delivered security functions (SWG, CASB, ZTNA).
• Proficiency in automation using Python, Ansible, and Terraform for infrastructure and policy management.
• Experience designing cloud security architectures across AWS, Azure, and GCP.
• Familiarity with identity protocols: SAML, OAuth2, and OpenID Connect for access control.
• Experience integrating with SIEM/SOAR tools (Splunk, QRadar, Sentinel) and endpoint security (CrowdStrike, Defender).
• Strong understanding of network protocols, including IKEv2/IPSec/GRE, BGP/OSPF, and traffic steering.
• Exposure to regulated verticals (BFSI) with a focus on data protection and audit readiness.

Preferred Skills

• Experience with hybrid cloud security models and multi-cloud segmentation strategies.
• Familiarity with DevSecOps Pipelines and CI/CD security gates.

Key Skills

Education

Any Gradute