Job Summary: We are looking for an experienced

Cloud Network Security Engineer

with strong expertise in

Zscaler, Microsoft Entra, Azure Networking, Zero Trust, and enterprise network security . The ideal candidate will have hands-on experience designing, implementing, and supporting secure cloud and hybrid network environments, with a strong understanding of

SASE, SSE, ZTNA, Secure Web Gateway, CASB, and Zero Trust security architectures . The role will involve working with enterprise-scale security and networking technologies, troubleshooting complex connectivity and security issues, and supporting cloud transformation initiatives.

Key Responsibilities: Design, implement, configure, and support

Zscaler Internet Access (ZIA)

and

Zscaler Private Access (ZPA)

solutions. Implement and manage

Microsoft Global Secure Access, Microsoft Entra Internet Access, and Microsoft Entra Private Access . Design and support

SSE, SASE, ZTNA, SWG, CASB, Cloud Firewall, and Zero Trust Security

architectures. Integrate security solutions with

Microsoft Entra ID , including SAML, SCIM, MFA, and Conditional Access. Configure and support integrations with

Microsoft Defender for Cloud Apps

and

Microsoft Defender for Endpoint . Implement and troubleshoot

SSL/TLS inspection, PAC files, proxy chaining, traffic forwarding, and policy-based access controls . Design, configure, and support

Azure networking environments , including VNets, VNet Peering, NSGs, Route Tables, Azure Firewall, Private Endpoints, DNS Services, and Virtual WAN. Support

Azure ExpressRoute

deployment, configuration, monitoring, and operations. Work with enterprise networking technologies including

TCP/IP, DNS, DHCP, routing, switching, VLANs, NAT, VPN, and load balancing . Configure and troubleshoot

Cisco enterprise routing and switching





environments. Work with enterprise firewall platforms such as

Palo Alto, Fortinet, Check Point, Cisco Firepower , or equivalent technologies. Perform network and security troubleshooting using

packet captures, traceroute, firewall logs, proxy logs, and security monitoring tools . Analyze network traffic, identify security or connectivity issues, and implement appropriate remediation. Collaborate with infrastructure, cloud, security, and application teams to implement secure connectivity solutions. Participate in large-scale

cloud transformation and Zero Trust adoption initiatives . Ensure security solutions align with enterprise security policies, architecture standards, and operational requirements.

Requirements: Strong hands-on experience with

Zscaler Internet Access (ZIA)

and

Zscaler Private Access (ZPA) . Experience with

Microsoft Global Secure Access, Microsoft Entra Internet Access, and Microsoft Entra Private Access . Strong understanding of

SWG, Cloud Firewall, CASB, SSE, SASE, ZTNA, and Zero Trust Security

concepts. Experience with

Microsoft Entra ID, SAML, SCIM, MFA, and Conditional Access . Experience integrating and monitoring

Microsoft Defender for Cloud Apps and Microsoft Defender for Endpoint . Strong knowledge of

SSL/TLS Inspection, PAC Files, Proxy Chaining, Traffic Forwarding, and Policy-Based Access Control . Strong Azure networking experience with:



VNets and VNet Peering NSGs and Route Tables Azure Firewall Private Endpoints DNS Services Azure Virtual WAN Hands-on experience with

Azure ExpressRoute deployment and operations . Robust networking fundamentals covering

TCP/IP, DNS, DHCP, Routing, Switching, VLANs, NAT, VPN, and Load Balancing . Strong experience with

Cisco networking technologies and enterprise Routing/Switching . Experience with enterprise firewall platforms such as

Palo Alto, Fortinet, Check Point, Cisco Firepower , or equivalent. Robust troubleshooting skills using

packet capture, log analysis, traceroute, firewall logs, proxy logs, and network monitoring tools .

Preferred Skills & Certifications: Zscaler Certified Administrator or Professional

certification. Microsoft Certified: Azure Network Engineer Associate (AZ-700) . Microsoft Certified: Azure Administrator Associate (AZ-104) . Microsoft security certifications related to

Entra, Zero Trust, and Defender technologies . CCNP Enterprise or CCNP Security . PCNSE

or equivalent firewall certification. CISSP, CCSP , or equivalent security certification. Experience in the

Banking / Financial Services

domain. Experience working on

large-scale cloud transformation

and security modernization initiatives.

Ideal Candidate Profile: Strong combination of

networking, cloud, and cybersecurity

expertise. Hands-on experience implementing

Zscaler and Microsoft security solutions

in enterprise environments. Good understanding of

Zero Trust and SASE/SSE architecture . Strong analytical and troubleshooting skills. Ability to work across network, security, cloud, and infrastructure teams. Experience handling enterprise-scale environments and complex technical issues. Strong communication and stakeholder management skills.

📌 Zscaler & Microsoft Security – Cloud Network Security Engineer - AVP (Mumbai)
🏢 ToCumulus
📍 Mumbai