Vista previa de la oferta
USI - EH - FY27 - Cyber - Enterprise Security - Zscaler - L35 - Security Engineer II (CON)
senior · Technology / Software Development
Zscalar/Zero Trust
L35 - Consultant
We are seeking an experienced Zscaler Architect / Senior Engineer to lead and support the implementation, configuration, and migration of Zscaler Internet Access (ZIA) and Zscaler Private Access (ZPA) solutions in enterprise environments. This role will help design and deliver Zero Trust access models, modernize remote access, and support migration from legacy VPN and proxy technologies. The ideal candidate brings strong hands-on Zscaler delivery experience, solid network security fundamentals, and the ability to work across security, network, IAM, and endpoint teams.
Work you'll do
As a Consultant on the Cyber team, you will be responsible for:
- Leading and supporting the implementation, configuration, and migration of Zscaler Internet Access (ZIA) and Zscaler Private Access (ZPA) solutions.
- Assessing current-state network and security architecture and designing Zero Trust access models aligned to business and security requirements.
- Planning and executing migration from legacy VPN, proxy, and remote access technologies to Zscaler platforms.
- Configuring ZIA and ZPA policies, application segmentation, connector deployment, authentication, forwarding methods, and user-to-application connectivity.
- Troubleshooting connectivity, performance, and policy issues and supporting pilot, rollout, cutover, and post-migration activities.
The team
Deloitte’s Cyber team helps organizations build, operate, and enhance security capabilities across identity, network, cloud, and application environments. The team works with clients to modernize security architecture, enable secure access, and support enterprise transformation through scalable, business-aligned solutions. Professionals in this practice collaborate across cybersecurity, infrastructure, and technology stakeholders to address complex security and connectivity challenges.
Location: Hyderabad/Bengaluru/Pune/Chennai
Shift Timings: Regular India Shift Timing
Qualifications
Required:
- 6-9 years of experience in network security, cloud security, or enterprise security architecture.
- Experience implementing and migrating Zscaler Internet Access (ZIA) and Zscaler Private Access (ZPA) in enterprise environments.
- Experience configuring ZIA security policies, including URL filtering, Secure Sockets Layer (SSL) inspection, authentication, forwarding methods, and access controls.
- Experience configuring ZPA application segmentation, connector deployment, access policies, and user-to-application connectivity.
- Experience integrating Zscaler with identity and security platforms, including Microsoft Entra ID, Okta, Security Assertion Markup Language (SAML), System for Cross-domain Identity Management (SCIM), security information and event management (SIEM), endpoint detection and response (EDR), or cloud access security broker (CASB) tools.
- Experience with Domain Name System (DNS), Transmission Control Protocol/Internet Protocol (TCP/IP), routing, firewall policies, proxy technologies, and VPN migration.
- Experience creating technical documentation, including architecture diagrams, runbooks, migration plans, and operational handover materials.
Preferred:
- Experience designing Zero Trust Network Access (ZTNA) solutions and remote access modernization programs.
- Experience with Zscaler Digital Experience (ZDX) for experience monitoring and user troubleshooting.
- Experience deploying Zscaler Client Connector and integrating with endpoint platforms.
- Experience with Microsoft Azure, Amazon Web Services (AWS), or Google Cloud Platform (GCP).
- Experience supporting large-scale enterprise transformation or network security modernization programs.
- Zscaler Certified Cloud Administrator (ZCCA), Zscaler Certified Cloud Professional (ZCCP) for ZIA or ZPA, or Zscaler Certified Cloud Specialist (ZCCS).
This position is aligned with the Core Talent Model. To view the associated benefit package, please reference this document https://resources.deloitte.com/sites/dnet-tod-usi/Shared Documents/Benefits/USIBenefitsBrochureforPlanG.pdf