ZTNA / Zero Trust Network Engineer

Overview

We are looking for a highly experienced ZTNA / Zero Trust Network Engineer to support a large-scale enterprise network and endpoint modernization program. You will help move the organization from a relatively flat network to an application-aware Zero Trust Network Access model.

The ideal candidate has hands-on ZTNA implementation experience in a large enterprise and strong knowledge of networking, identity, security, and infrastructure automation.

Key responsibilities

• Design, implement, and support enterprise ZTNA solutions.
• Support large-scale network and endpoint modernization initiatives.
• Move applications and users from traditional network access to Zero Trust architectures.
• Develop and implement ZTNA policies at the application level.
• Troubleshoot application connectivity and network access issues.
• Analyze network traffic and packet flows to resolve complex connectivity problems.
• Work closely with identity and access management teams.
• Integrate ZTNA with enterprise identity providers and MFA technologies.
• Automate infrastructure configuration and deployment at enterprise scale.
• Support DDI and network modernization initiatives.
• Collaborate with infrastructure, security, endpoint, and application teams.
• Document designs, configurations, troubleshooting procedures, and standards.

Required experience

• Strong hands-on Zero Trust / ZTNA architecture experience.
• Implemented or supported ZTNA in a large organization.
• Experience with Zscaler, Netskope, or comparable ZTNA platforms.
• Strong networking fundamentals and application connectivity troubleshooting.
• Packet-level troubleshooting skills (for example, Wireshark).
• Experience with identity platforms such as Microsoft Entra ID or comparable.
• Understanding of OIDC, MFA, authentication, and authorization.
• Strong understanding of application networking and access control.
• Experience with PowerShell, Ansible, Infrastructure as Code, or comparable automation.
• Ability to turn networking requirements into scalable automated solutions.
• Large enterprise experience highly preferred.

Important

Ideal candidate

someone who has already taken part in a large-scale Zero Trust transformation, ideally at an organization with 5,000+ users or endpoints, and who is equally comfortable discussing networking, identity, security, application connectivity, and automation. This is a specialist ZTNA profile, not a generic network engineer.