Lead Network Engineer – Security

Role Type: Full-time • Level: Senior Project Engineer
Location: Bangalore • Reports to: Network Infrastructure Project Manager
Teams interfaced: Business Units, Architecture, Security, PMO, Vendors

Role Summary

We are seeking a Lead Network Engineer – Security with strong expertise in Zscaler Secure Web Gateway and LAN technologies (HP Aruba & ClearPass) to lead design and deployment activities for network security and user access solutions. The candidate will work independently to understand business needs, propose optimized solutions, and implement them end-to-end. The role also involves advising on Zscaler subscriptions and services to ensure cost-effective and secure deployments.

Key Responsibilities

Zscaler Secure Web Gateway

• Engage with business teams to understand requirements and translate them into Zscaler solution designs.
• Propose optimized configurations and subscription models based on usage and security needs.
• Prepare detailed design documents and deployment plans for Zscaler services.
• Execute end-to-end implementation, including policy configuration, integration with identity providers, and traffic steering.
• Validate deployment through testing and performance optimization.

LAN & Access Control (HP Aruba & ClearPass)

• Design and deploy LAN solutions for user connectivity using HP Aruba switches.
• Implement ClearPass for network access control, including profiling, authentication, and policy enforcement.
• Ensure seamless integration with existing network and security infrastructure.

Project Execution

• Own the design, build, and deployment phases for assigned projects.
• Prepare LLDs, configuration templates, and implementation guides.
• Conduct UAT and cutover activities, ensuring minimal disruption.
• Provide status updates, risk assessments, and documentation to stakeholders.

Core Technology Scope

• Secure Web Gateway: Zscaler (ZIA, ZPA, policy design, traffic steering, identity integration)
• LAN: HP Aruba switches (Access layer design, VLANs, QoS)
• Access Control: ClearPass (802.1X, NAC, profiling, policy enforcement)
• Integration: Identity providers (AD, Azure AD), VPN solutions
• Networking Fundamentals: Routing, switching, DNS, DHCP
• Preferred: Familiarity with SD-WAN concepts (basic awareness)