Job Requirements*

- 8+ years of experience in cyber security, network security, Prsma cloud security, identity security, endpoint security, or enterprise security architecture roles.

- Strong understanding of Zero Trust principles including never trust/always verify, identity-centric access, least privilege, device posture, segmentation, and continuous monitoring.

- Hands-on experience with SASE/SSE/ZTNA platforms such as Zscaler, Prisma Access, Cisco SSE, or equivalent secure access technologies.

- Experience with identity and access security including Microsoft Entra ID / Azure AD, MFA, Conditional Access, RBAC, PAM/PIM, privileged access controls, and identity governance.

- Solid knowledge of network security controls including firewalls, VPN, IDS/IPS, URL filtering, application control, NAC, proxy, TLS inspection, and secure remote access.

- Experience designing security segmentation and micro-segmentation across users, devices, applications, workloads, and data center/cloud environments.

- Good knowledge of cloud security controls across Azure/AWS/GCP including IAM, security groups, network ACLs, CSPM, logging, monitoring, and compliance posture.

- Exposure to SIEM/SOAR and threat detection platforms such as Microsoft Sentinel, Splunk, QRadar, ArcSight, or equivalent security monitoring solutions.

- Experience in vulnerability management, security hardening, risk assessment, incident response coordination, and remediation tracking.

- Ability to create security HLD/LLD, architecture diagrams, implementation plans, SOPs, runbooks, risk documentation, and stakeholder presentations.





Key Responsibilities*

- Define enterprise Zero Trust strategy, target-state security architecture, and implementation roadmap across identity, endpoint, network, cloud, applications, and data layers.

- Design secure remote access and private application access solutions using ZTNA/SASE/SSE platforms and align them with enterprise access policies.

- Architect identity-led security controls including MFA, Conditional Access, PAM/PIM, least privilege access, identity governance, and privileged access monitoring.

- Design and review firewall, VPN, NAC, segmentation, micro-segmentation, and secure internet breakout architectures.

- Collaborate with infrastructure, network, cloud, endpoint, IAM, SOC, application, compliance, and business teams to implement Zero Trust controls.

- Review existing security posture, identify gaps, perform risk assessments, and recommend practical remediation measures aligned to business requirements.

- Prepare HLD, LLD, design standards, security patterns, migration plans, rollout strategies, and operational handover documents.

- Integrate security solutions with SIEM/SOAR, ITSM, vulnerability management, endpoint security, and monitoring platforms for visibility and response.

- Provide technical leadership during security incidents, architecture reviews, audits, escalations, migrations, and transformation programs.

Drive governance, documentation, compliance alignment, operational readiness, and continuous improvement of Zero Trust Role & responsibilities

Preferred candidate profile

📌 Prisma ZTNA Specialist (Chennai)
🏢 Tata Consultancy Services
📍 Chennai