Zscaler & Microsoft Security – Cloud Network Security Engineer - AVP

Job Summary We are looking for an experienced Cloud Network Security Engineer with strong expertise in Zscaler, Microsoft Entra, Azure Networking, Zero Trust, and enterprise network security . The ideal candidate will have hands-on experience designing, implementing, and supporting secure cloud and hybrid network environments, with a strong understanding of SASE, SSE, ZTNA, Secure Web Gateway, CASB, and Zero Trust security architectures . The role will involve working with enterprise-scale security and networking technologies, troubleshooting complex connectivity and security issues, and supporting cloud transformation initiatives. Key Responsibilities - Design, implement, configure, and support Zscaler Internet Access (ZIA) and Zscaler Private Access (ZPA) solutions. - Implement and manage Microsoft Global Secure Access, Microsoft Entra Internet Access, and Microsoft Entra Private Access . - Design and support SSE, SASE, ZTNA, SWG, CASB, Cloud Firewall, and Zero Trust Security architectures. - Integrate security solutions with Microsoft Entra ID , including SAML, SCIM, MFA, and Conditional Access. - Configure and support integrations with Microsoft Defender for Cloud Apps and Microsoft Defender for Endpoint . - Implement and troubleshoot SSL/TLS inspection, PAC files, proxy chaining, traffic forwarding, and policy-based access controls . - Design, configure, and support Azure networking environments , including VNets, VNet Peering, NSGs, Route Tables, Azure Firewall, Private Endpoints, DNS Services, and Virtual WAN. - Support Azure ExpressRoute deployment, configuration, monitoring, and operations. - Work with enterprise networking technologies including TCP/IP, DNS, DHCP, routing, switching, VLANs, NAT, VPN, and load balancing . - Configure and troubleshoot Cisco enterprise routing and switching environments. - Work with enterprise firewall platforms such as Palo Alto, Fortinet, Check Point, Cisco Firepower , or equivalent technologies. - Perform network and security troubleshooting using packet captures, traceroute, firewall logs, proxy logs, and security monitoring tools . - Analyze network traffic, identify security or connectivity issues, and implement appropriate remediation. - Collaborate with infrastructure, cloud, security, and application teams to implement secure connectivity solutions. - Participate in large-scale cloud transformation and Zero Trust adoption initiatives . - Ensure security solutions align with enterprise security policies, architecture standards, and operational requirements. Requirements Mandatory Skills - Strong hands-on experience with Zscaler Internet Access (ZIA) and Zscaler Private Access (ZPA) . - Experience with Microsoft Global Secure Access, Microsoft Entra Internet Access, and Microsoft Entra Private Access . - Strong understanding of SWG, Cloud Firewall, CASB, SSE, SASE, ZTNA, and Zero Trust Security concepts. - Experience with Microsoft Entra ID, SAML, SCIM, MFA, and Conditional Access . - Experience integrating and monitoring Microsoft Defender for Cloud Apps and Microsoft Defender for Endpoint . - Strong knowledge of SSL/TLS Inspection, PAC Files, Proxy Chaining, Traffic Forwarding, and Policy-Based Access Control . - Strong Azure networking experience with: - VNets and VNet Peering - NSGs and Route Tables - Azure Firewall - Private Endpoints - DNS Services - Azure Virtual WAN - Hands-on experience with Azure ExpressRoute deployment and operations . - Strong networking fundamentals covering TCP/IP, DNS, DHCP, Routing, Switching, VLANs, NAT, VPN, and Load Balancing . - Strong experience with Cisco networking technologies and enterprise Routing/Switching . - Experience with enterprise firewall platforms such as Palo Alto, Fortinet, Check Point, Cisco Firepower , or equivalent. - Strong troubleshooting skills using packet capture, log analysis, traceroute, firewall logs, proxy logs, and network monitoring tools . Preferred Skills & Certifications - Zscaler Certified Administrator or Professional certification. - Microsoft Certified: Azure Network Engineer Associate (AZ-700) . - Microsoft Certified: Azure Administrator Associate (AZ-104) . - Microsoft security certifications related to Entra, Zero Trust, and Defender technologies . - CCNP Enterprise or CCNP Security . - PCNSE or equivalent firewall certification. - CISSP, CCSP , or equivalent security certification. - Experience in the Banking / Financial Services domain. - Experience working on large-scale cloud transformation and security modernization initiatives. Ideal Candidate Profile - Strong combination of networking, cloud, and cybersecurity expertise. - Hands-on experience implementing Zscaler and Microsoft security solutions in enterprise environments. - Good understanding of Zero Trust and SASE/SSE architecture . - Strong analytical and troubleshooting skills. - Ability to work across network, security, cloud, and infrastructure teams. - Experience handling enterprise-scale environments and complex technical issues. - Strong communication and stakeholder management skills. -