Job Title: Network Security Engineer – Zscaler &

- Next-Gen Firewalls

Location: Major Metro Cities (Bengaluru, Mumbai, Pune, Kolkata, Hyderabad, Chennai)

Work Mode: Hybrid to Remote

Experience: 5 to 6 Years Total (2 to 3 Years in Zscaler)

Role Overview

We are looking for an experienced Network Security Engineer to design, implement, maintain, and support our global network security infrastructure. This position is based out of major metro cities with a flexible hybrid-to-work from home setup. The ideal candidate will bring 5–6 years of total experience in network security, including 2–3 years of dedicated hands-on expertise with Zscaler platforms (ZIA/ZPA).

You will play a crucial role in driving our cloud security architecture while maintaining and troubleshooting enterprise Next-Generation Firewalls (NGFWs) such as Fortinet/FortiGate and Palo Alto Networks.

Key Responsibilities

Zscaler Platform Management (Primary Focus)

Deploy, configure, and manage Zscaler Internet Access (ZIA) and Zscaler Private Access (ZPA) environments across the enterprise.

Manage and troubleshoot Zscaler Client Connector (ZCC) deployments, forwarding policies, PAC files, and authentication workflows.

Configure security policies, URL filtering, Cloud Sandbox, Advanced Threat Protection (ATP), SSL inspection, and Data Loss Prevention (DLP) rules.

Maintain App Connectors, Service Connectors, and tunnel configurations.

Firewall &

- Infrastructure Operations

Manage day-to-day operations, rule base optimizations, NAT, and IPSec VPN tunnels across Fortinet (FortiGate) and Palo Alto Networks firewalls.

Manage rule updates, object creation,



and policy changes using centralized management tools like Panorama (Palo Alto) and FortiManager.

Perform firmware upgrades, patch management, and vulnerability remediations for firewall hardware and virtual instances.

Operations &

- Incident Management

Act as an escalation point for Level 2/Level 3 network security incidents, connectivity issues, and performance bottlenecks.

Utilize tools like Wireshark, tcpdump, and Zscaler Digital Experience (ZDX) to diagnose complex traffic flow, SSL/TLS, and routing issues.

Support identity integration via SSO, SAML, Azure AD/Entra ID, or Okta for Zscaler and firewall access policies.

Requirements &

- Qualifications

Experience: 5 to 6 years of overall experience in Network Security Engineering, with at least 2 to 3 years focused on Zscaler administration and deployment.

Primary Skills: Zscaler Internet Access (ZIA), Zscaler Private Access (ZPA), and Zscaler Client Connector (ZCC).

Secondary Skills: Deep hands-on experience with Palo Alto Networks and Fortinet (FortiGate) firewalls.

Core Networking: Strong grasp of TCP/IP, BGP, OSPF, DNS, IPsec VPNs, SSL/TLS decryption, and NAT configurations.

Identity &

- Access: Working understanding of SAML, SCIM, Active Directory, and Identity Providers (IdP) for zero-trust access policies.

Preferred Certifications

Zscaler: ZCCA-IA / ZCCA-PA or ZDTA / ZDTE (Zscaler Certified Digital Transformation Engineer/Administrator)

Palo Alto: PCNSA / PCNSE

Fortinet: NSE 4 / NSE 5

General: CCNP Security or CISSP

Skills: zscaler,fortinet,zia,network security,fortigate,palo alto networks,firewalls,zpa

📌 Network Security Engineer Zscaler & Next-Gen Firewalls (Pune)
🏢 Neev
📍 Pune