Job Requirements
Lead Network Security Engineer (ZTNA & Zero Trust Access)
Experience: 10+ years

Employment Type: Full time

Role Overview
We are seeking a
Lead Network Security Engineer – ZTNA & Zero Trust Access
to design and operate
identity-driven access controls
in a regulated banking setting.

This role focuses on
Zero Trust Network Access (ZTNA)
for users, vendors, and applications, while working closely with teams responsible for
SWG, firewalls, and Web/API Protection
.

Key Responsibilities
Primary Focus – ZTNA
Design and implement ZTNA-based access models for internal users, third parties, and partners.
Reduce dependency on traditional VPNs by deploying identity-aware, device-aware access controls.
Integrate ZTNA with identity providers, endpoint posture, and risk-based access policies.
Support secure access to on-prem and cloud-hosted applications.

Security Operations & Governance
Monitor ZTNA access logs and anomalies; integrate with SIEM and SOC workflows.




Participate in incident response related to unauthorized access or identity misuse.
Ensure ZTNA implementation aligns with regulatory and audit requirements.
Maintain architecture documentation and SOPs.

Required Skills
Hands-on experience implementing ZTNA / Zero Trust access architectures.
Strong understanding of identity-based access, authentication, and authorization models.
Knowledge of network fundamentals to troubleshoot access and connectivity issues.
Ability to troubleshoot network and security issues in complex environments.
Strong understanding of cloud security principles, including SaaS, IaaS, and PaaS.
Knowledge of security frameworks such as ISO 27001, NIST, or GDPR is a plus.
Hands-on experience with networking protocols such as HTTP, HTTPS, DNS, and
TCP/IP.
Solid communication skills and the ability to collaborate with teams across various functions.
Certifications in network security (e.g., CCSP, CISSP, CompTIA Security+, or equivalent) are

📌 Lead Network Security Engineer Mumbai (India)
🏢 IDFC FIRST Bank
📍 India