Cyber Resilience - ZTNA Implementation Engineer - Contract - Hybrid role (Bengaluru or Gurugram)

Job Title : Cyber Resilience - ZTNA Implementation Engineer

Location : (Hybrid role) Gurgaon OR Bengaluru

Engagement : (6 - 12+ Months with high possibility of extensions)

Department Enterprise Network Services (ENS)

Level Infrastructure Engineer - 6

We share a commitment to making things better for clients and each other. We continually explore new technology and different ways of working to put our clients first. So bring your boldest ideas to the Enterprise Network Services team and feel like you’re making progress.

About your team

The Engineering group is an integral and strategy defining function within Enterprise Network Services team, overall part of Technology Infrastructure, defining the roadmap, design, patterns, blueprints, and high-level / low-level implementation for core technologies within the network, firewall and voice domains.

About your role Within this role, you’ll be at the forefront of leading an enterprise network segmentation program, delivering initial ZTNA access for developers and system administrators, utilizing Zscaler Private Access (ZPA), translating business intent and data flows into declarative policy, reducing network attack surface and increasing cyber resilience.

• You’ll be reviewing historic traffic flow logs, aligning to business intent and requirements, determining and rationalizing network flows, and translating this into scalable and maintainable ZPA access policy.
• You’ll be engaging with internal business units, developers, architects and SMEs to validate and rationalize observed traffic flows and interactions, confirming policy prior to implementation.
• You’ll be engaging with internal security stakeholders to assess and determine approval or rejection of certain traffic flows, according to the security and safety of protocol usage, following risk acceptance processes where necessary.
• You’ll be engaging with external stakeholders, within third-parties as well as other B2B organisations which FIL interconnect with, both within the network and security function, as well as within the business development and application support functions, to identify the nature of resources being accessed by FIL resources and vice versa, confirming and validating the need for these assets to be accessed according to defined business intent.
• You’ll be documenting all segmentation instances / application runs, incorporating into application passports attestation, contributing towards cyber KPI’s relating to improvement in cyber posture and risk reduction for developer and engineer access to internal applications and resources.

A suitable candidate for this role would have the following skillset :

Subject Matter Expert Skillset – As part of joining the Engineering function and working on this cyber resilience acceleration project, you’ll be expected to bring a Subject Matter Expert (SME) skillset, specifically for Zscaler Private Access (ZPA). ZPA is the strategic underpinning and enabling technology for FIL users to remotely connect to internal applications and resources, and as such, knowledge and experience with translating observed

traffic flows and user interactions to deterministic network policy restrictions within ZPA is essential. Your role here as a ZTNA implementation engineer will concentrate on consuming the analysing and policy recommendations of a traffic analyst, derived from flow log data, and as such, the priority in skillset here is to ensure comprehensive understanding of how to implement ZPA Access Policy within a nature to facilitate necessary application access, whilst blocking unnecessary and non-business aligned flow attempts.