Join EY and build a career that's as unique as you are. We're seeking a Senior Zero Trust Network Access (ZTNA) Engineer to architect, deploy, and manage our advanced identity-centric perimeter security solutions. This pivotal role focuses on transitioning from legacy VPN architectures to a modern, least-privilege, context-aware access model.

The ideal candidate will possess hands-on expertise in integrating ZTNA platforms with enterprise Identity Providers, enforcing device posture checks, and securing hybrid enterprise applications. This is an opportunity to leverage your skills in a global scale, inclusive culture, supported by technology to become the best version of yourself.

Your role will encompass the full service delivery lifecycle: Assess, Build, Transition, and Operations.

Responsibilities include conducting architecture reviews and posture analysis of current remote access models and applications. You'll design and deploy enterprise ZTNA solutions, configuring context-aware access policies based on identity, device health, and risk. This involves integrating ZTNA platforms with SSO and Directory Services, provisioning connectors across cloud environments, and managing phased migration roadmaps from legacy VPNs.

You will also drive user acceptance testing, develop comprehensive "As-Built" documentation and runbooks, and conduct enablement sessions for support teams. Furthermore, you'll act as a senior escalation point for complex issues, manage continuous policy lifecycle, monitor ZTNA performance, and ensure security telemetry streams into the SIEM. Understanding and managing ITIL-based change management processes is crucial.

We are looking for a seasoned professional with 3–5 years of dedicated experience in network security, IAM, or zero trust architecture implementation. A strong command of core ZTNA platforms like Zscaler Private Access, Palo Alto Prisma Access, Cloudflare One, or Microsoft Global Secure Access is essential.

Your expertise should extend to IAM principles, SAML/OIDC authentication protocols, Active Directory/Entra ID, and fundamental networking concepts (DNS, TCP/IP, routing, firewalls). A deep understanding of Zero Trust principles, including "Never Trust, Always Verify," micro-segmentation, and device posture validation frameworks, is required.

Relevant vendor or cloud security certifications are highly preferred. Excellent cross-functional collaboration skills, the ability to manage enterprise-wide change initiatives, and strong technical documentation capabilities are also key requirements for this role.