Join EY as a Senior Associate – Network Security Engineer, focusing on Zscaler technologies to enhance our global network security. This role is integral to our Security Technology Services team, driving innovation in Zero Trust Network Access and private application security.

EY is committed to leveraging technology to create a better working world. We seek individuals passionate about building and engineering robust security solutions at a global scale, ensuring the security and integrity of our extensive operations.

This position offers a unique opportunity to contribute to cutting-edge security initiatives, collaborate with diverse global teams, and develop your career within a supportive and dynamic environment.

As a Zscaler Network Security Engineer, you will engineer, deploy, and optimize Zscaler Private Access (ZPA) services. Your core responsibilities include designing and implementing granular ZPA application segments, managing App Connectors and Private Service Edges, and ensuring least-privilege user-to-application access.

You will also be responsible for troubleshooting complex ZPA issues, validating traffic flows, and supporting the onboarding of internal applications. Collaboration with network security, cloud engineering, identity, and application teams is crucial for successful global ZPA deployments.

Additionally, you will contribute to automation efforts for security engineering efficiency and provide hands-on escalation support for Zscaler-related incidents.

To qualify, a Bachelor’s degree in Computer Science, Information Technology, Engineering, or equivalent experience is required. We are seeking 4-7 years of experience in network security, cloud security, or security engineering, with 3-5 years specifically in Zscaler, including hands-on ZPA deployment and configuration.

Essential skills include a strong understanding of ZPA constructs like application segments, segment groups, server groups, access policies, App Connectors, and Private Service Edges. You must possess the ability to troubleshoot ZPA issues using logs, diagnostics, and packet-level analysis, along with experience integrating ZPA with identity providers.

Familiarity with Azure networking, hybrid connectivity, and fundamental networking concepts like TCP/IP, DNS, and TLS is also necessary. Experience with automation tools such as Python, PowerShell, or Terraform is preferred.