Senior Network Security Engineer ZTNA (Zscaler, Axis/SSE Focus)

Role :- Senior Network Security Engineer ZTNA (Zscaler, Axis/SSE Focus)
Location :- Houston, TX(Onsite)
Note: Client is not willing to sponsor any visa.

=Note :- ZTNA (Zscaler, Axis/SSE Focus) experience is must==

Client is an innovative, dynamic company with a rich past and promising future. Company has continuously reinvented itself. Today, Client is one of the world's leading technology companies providing networking, cloud, and security solutions for next-generation IT infrastructure.
Key Responsibilities

• Translate strategic business objectives into enterprise security architecture and Zero Trust access designs.
• Develop and support solutions aligned with global Zero Trust and Secure Access Service Edge (SASE) strategy.
• Drive multi-year roadmap for secure remote access, application access transformation, and perimeter-less security architecture.
• Lead architecture and deployment of enterprise-scale ZTNA solutions across global environments (on-prem, cloud, hybrid).

ZTNA & Zero Trust Responsibilities (Primary Focus)

• Architect, design, and implement Zero Trust Network Access (ZTNA)solutions using:
  • Zscaler (ZIA, ZPA)
  • Axis Security / Aruba SSE
• Replace legacy VPN architectures with identity-aware, application-level secure access.
• Design and enforce least-privilege access modelsbased on:
  • User identity
  • Device posture
  • Application context
• Integrate ZTNA with:
  • Identity providers (Azure AD, Okta, etc.)
  • Endpoint security tools (EDR/XDR)
  • SIEM/SOAR platforms
• Enable secure access for:
  • Remote workforce
  • Third-party vendors
  • Privileged users
• Drive application segmentation and access policiesaligned with Zero Trust principles.
• Collaborate with application and infrastructure teams to onboard applications into ZTNA platforms.
• Design secure access for internet-bound (ZIA) and private application access (ZPA/Axis)use cases.
• Implement policy tuning, traffic steering, and user experience optimizationfor ZTNA environments.
• Lead migration programs from VPN ZTNA, ensuring minimal disruption and improved security posture.

Core Network Security Responsibilities

• Participate in architecture reviews ensuring alignment with enterprise security standards.
• Design and secure data center, campus, cloud, and edge environments.
• Provide risk reporting, telemetry analysis, and security posture visibilityacross network and ZTNA platforms.
• Conduct and support security audits and compliance initiatives.
• Stay updated with emerging threats and continuously improve security frameworks.
• Manage and optimize SIEM systemsfor enhanced visibility and threat detection.
• Collaborate with global cybersecurity, infrastructure, and business stakeholders.

Technical Qualifications

• 10+ years of experience in network security architecture and engineering.

ZTNA / SASE / SSE Expertise (Mandatory)

• Hands-on experience implementing and managing:
  • Zscaler Internet Access (ZIA)
  • Zscaler Private Access (ZPA)
  • Axis Security / Aruba SSE platform
• Strong understanding of:
  • Zero Trust Architecture (ZTA)
  • SASE / SSE frameworks
• Experience with:
  • Application onboarding in ZTNA platforms
  • Policy creation (user/app/device-based)
  • Traffic forwarding (PAC files, GRE/IPSec tunnels, client connectors)
• Expertise in:
  • Secure web gateway (SWG)
  • Cloud-delivered firewall
  • CASB/DLP integrations
• Experience in identity integration(Azure AD, SAML, OAuth, MFA enforcement).
• Strong knowledge of user experience optimization in cloud security platforms.

Network Security & Infrastructure

• Strong experience in:
  • Firewalls (Fortinet, Palo Alto, Juniper)
  • IDS/IPS, VPN, SIEM, NAC
• Deep expertise in:
  • Firewall rule design, NAT, routing, application-aware policies
• Experience in securing:
  • Hybrid environments (data centers + cloud + internet edge)
• Design and implementation of:
  • WAAP (Web Application & API Protection)solutions
• Experience in proxy architectures (forward/reverse).

Networking & Protocol Expertise

• Strong knowledge of:
  • BGP, OSPF, MPLS, IP routing
  • DNS, DHCP, NTP
• Experience with:
  • QoS, NetFlow, ACLs, NAT, IP traffic management
  • Wireless networking (802.11 a/b/g/n/ac/ax)

Cloud & Modern Security Integration

• Experience in securing workloads in:
  • AWS, Azure, Google Cloud Platform
• Integration of ZTNA with:
  • Cloud-native security tools
  • Identity and access frameworks
• Understanding of application access patterns in hybrid cloud.

Data Center & Enterprise Networking

• Experience managing:
  • Aruba, Arista, Juniper switching
  • WAN optimization, load balancers, firewalls
• Strong understanding of enterprise-scale network design and segmentation.

Operations & Lifecycle

• Lead migration initiatives from:
  • Legacy VPN ZTNA/SSE platforms
• Manage secure connectivity with third parties using ZTNA.
• Plan and execute infrastructure upgrades and transformations.
• Work within ITIL frameworksfor change and incident management.

Education & Certifications

• Bachelor s Degree in Computer Science, Network Engineering, or related field (or equivalent experience).
• 10+ years in enterprise network security roles.
• Preferred certifications:
  • CCNP / CCIE / JNCIE
  • Zscaler certifications (ZCCA, ZCTA, ZDX, etc.)
  • Security certifications (CISSP, CISM)

Key Differentiators (What This JD Emphasizes)

• Transitions role from network security identity-driven access security
• Positions ZTNA as a core transformation pillar (VPN replacement, SASE adoption)
• Aligns with enterprise initiatives like:
  • Zero Trust adoption
  • User-to-app segmentation
  • Secure hybrid workforce enablement
• Strong balance of:
  • Zscaler + Axis expertise
  • Traditional network security controls (firewalls, SIEM)