Overview
We are looking for a highly experienced ZTNA / Zero Trust Network Engineer to support a large-scale enterprise network and endpoint modernization program. You will help move the organization from a relatively flat network to an application-aware Zero Trust Network Access model.
The ideal candidate has hands-on ZTNA implementation experience in a large enterprise and strong knowledge of networking, identity, security, and infrastructure automation.
Key responsibilities
" Design, implement, and support enterprise ZTNA solutions.
" Support large-scale network and endpoint modernization initiatives.
" Move applications and users from traditional network access to Zero Trust architectures.
" Develop and implement ZTNA policies at the application level.
" Troubleshoot application connectivity and network access issues.
" Analyze network traffic and packet flows to resolve complex connectivity problems.
" Work closely with identity and access management teams.
" Integrate ZTNA with enterprise identity providers and MFA technologies.
" Automate infrastructure configuration and deployment at enterprise scale.
" Support DDI and network modernization initiatives.
" Collaborate with infrastructure, security, endpoint, and application teams.
" Document designs, configurations, troubleshooting procedures, and standards.
Required experience
" Strong hands-on Zero Trust / ZTNA architecture experience.
" Implemented or supported ZTNA in a large organization.
" Experience with Zscaler, Netskope, or comparable ZTNA platforms.
" Strong networking fundamentals and application connectivity troubleshooting.
" Packet-level troubleshooting skills (for example, Wireshark).
" Experience with identity platforms such as Microsoft Entra ID or comparable.
" Understanding of OIDC, MFA, authentication, and authorization.
" Strong understanding of application networking and access control.
" Experience with PowerShell, Ansible, Infrastructure as Code, or comparable automation.
" Ability to turn networking requirements into scalable automated solutions.
" Large enterprise experience highly preferred.
Important
Ideal candidate: someone who has already taken part in a large-scale Zero Trust transformation, ideally at an organization with 5,000+ users or endpoints, and who is equally comfortable discussing networking, identity, security, application connectivity, and automation. This is a specialist ZTNA profile, not a generic network engineer.