Join EY as a Senior Associate – Network Security Engineer, specializing in Zscaler Private Access (ZPA) and Zero Trust Network Access (ZTNA). This role focuses on engineering secure access solutions for private applications, minimizing cyber risk across a global enterprise. You will be instrumental in designing, deploying, and optimizing ZPA services to ensure least-privilege user-to-application access without exposing private applications to the internet. Become a key player in our Security Technology Services team, contributing to a security-first mindset that underpins EY's operations worldwide.

Leverage your expertise to implement advanced security engineering capabilities, driving Zero Trust principles and cloud transformation initiatives. This position offers a unique opportunity to build a career with global scale and support, making a tangible impact on how EY secures its vast network and data. Embrace a role where your technical skills and innovative approach are valued in creating a better, more secure working world.

As a Senior Associate – Network Security Engineer, you will be responsible for the end-to-end lifecycle of ZPA services. This includes building, configuring, and troubleshooting ZPA constructs like application segments, segment groups, and access policies. You will deploy and support App Connectors and Private Service Edges across various environments, ensuring granular, least-privilege access for users.

Your role will involve validating traffic flows, supporting application onboarding, and integrating ZPA with identity providers. You'll also troubleshoot complex issues using ZPA logs and diagnostics, develop test plans, and document operational procedures. Additionally, you will contribute to engineering automation solutions to enhance efficiency and collaborate closely with cross-functional teams to ensure scalable and secure ZPA capabilities.

To excel in this role, you need a Bachelor’s degree in Computer Science, Information Technology, Engineering, or equivalent experience. A minimum of 4-7 years in network security, cloud security, or security engineering is required, with 3-5 years specifically in Zscaler technologies, particularly ZPA deployment and troubleshooting.

Essential skills include a strong working knowledge of ZPA components, deep troubleshooting capabilities across DNS, routing, TLS, SAML, SCIM, and client connector behaviors. Experience integrating ZPA with identity providers like Microsoft Entra ID and familiarity with Azure networking are crucial. A solid understanding of TCP/IP, security fundamentals, and an aptitude for automation using scripting languages are highly valued.