Zscaler Network Security Engineer

At EY, you’ll have the chance to build a career as unique as you are, with the global scale, support, inclusive culture and technology to become the best version of you. And we’re counting on your unique voice and perspective to help EY become even better, too. Join us and build an exceptional experience for yourself, and a better working world for all.

Security Technology Services – Network Security Technology

Assistant Director – Network Security Operations | India

EY Technology

Technology has always been at the heart of what we do and deliver at EY. We need technology to keep an organization the size of ours working efficiently and securely. We have more than 400,000 people in over 150 countries, all of whom rely on secure technology to perform their jobs every day.

Everything we use as a firm depends on our security-first mindset. Our users, applications, cloud platforms, data centers, AI services, and business-critical systems all rely on modern security technologies to enable secure access, protect sensitive information, and reduce cyber risk.

Within Security Technology Services, our mission is to deliver world-class security capabilities that enable Zero Trust, cloud transformation, attack surface reduction, and secure digital experiences. If you are passionate about building and operating security solutions at global scale, we want to hear from you.

The Opportunity

We are looking for an Assistant Director – Network Security Operations to own Zscaler operations and automation within Security Technology Services. This is a senior, hands-on operations leadership role responsible for keeping Zscaler services stable, measurable, automated, supportable and continuously improved across production environments.

The role will provide operational leadership across Zscaler Internet Access, Zscaler Private Access, Client Connector, App Connectors, Private Service Edges, cloud connectors and related zero trust services used in complex global enterprise environments.

The successful candidate will combine deep Zscaler operational expertise, strong automation capability, disciplined service ownership and the ability to lead engineers through high-priority incidents, recurring problem patterns and platform improvement initiatives.

This role is focused on:

• Leading reliable operations for ZIA, ZPA, Client Connector, App Connectors, Private Service Edges and related Zscaler services.

• Driving Zscaler product automation for API-based administration, Terraform-managed configuration, policy lifecycle activities, configuration validation, reporting and service health checks.

• Managing major incidents, root cause analysis, recurring problems, change governance and service restoration for Zscaler platforms.

• Improving service maturity through dashboards, metrics, runbooks, controls and automation-led service improvement.

• The role will work closely with Network Security Technology, Cloud Engineering, Identity, Endpoint, Infrastructure, Application, SOC, Monitoring and Architecture teams to ensure Zscaler services are operated consistently, governed effectively and improved through automation.

Your Key Responsibilities

The Assistant Director – Network Security Operations will own Zscaler operational delivery, Zscaler product automation roadmap execution, platform reliability, incident response, governance and continual service improvement across ZIA, ZPA and related Zscaler capabilities.

Zscaler Operations Leadership

• Own operational delivery for ZIA, ZPA, Client Connector, App Connectors, Private Service Edges, cloud connectors and related services.

• Ensure services have clear ownership, monitoring, runbooks, escalation paths, change controls and operational readiness standards.

• Drive service availability, operational KPIs, incident trend reviews and targeted improvement actions.

• Provide hands-on escalation support for complex production issues across policy, identity, endpoint, DNS, routing, cloud and data center layers.

Zscaler Product Automation and Operational Engineering

• Define and execute the Zscaler product automation roadmap using Zscaler APIs, OneAPI, API clients, Terraform providers and supported product automation frameworks.

• Automate ZIA and ZPA configuration activities such as locations, IPSec or GRE tunnels, URL filtering policies, cloud firewall policies, application segments, segment groups, server groups and zero trust access policies.

• Use Zscaler Terraform providers and reusable modules to standardize deployments, reduce configuration errors and support repeatable product operations across environments.

• Use Zscaler Terraformer or equivalent supported tooling to import existing ZIA and ZPA configurations into Terraform-managed workflows where appropriate.

• Establish product automation controls for versioning, peer review, credential handling, rollback, drift detection and change validation for Zscaler-managed configurations.

Incident, Problem and Change Management

• Lead high-priority incident response with structured triage, clear communication, evidencebased escalation and disciplined service restoration.

• Drive root cause analysis across endpoint, identity, policy, service edge, connector, DNS, routing, firewall, proxy and target application layers.

• Own problem management for recurring issues and ensure corrective actions are tracked through closure.

• Ensure production changes follow risk assessment, test evidence, implementation, validation, rollback and communication standards.

• Platform Governance, Monitoring and Reporting

• Define and maintain service health dashboards, availability metrics, change metrics, incident trends and automation performance indicators.

• Govern configuration standards, policy ownership, exception handling, access reviews and audit evidence.

• Oversee controls for policy changes, administrative access, API credentials, service accounts, connector lifecycle and configuration drift.

• Prepare concise leadership updates covering service health, risks, incidents, dependencies, automation progress and improvement actions.

Team Leadership and Operational Delivery

• Lead, mentor and coordinate engineers responsible for Zscaler operations, automation, troubleshooting and service improvement.

• Prioritize the operational backlog across incidents, Zscaler product automation, technical debt, monitoring gaps and platform enhancements.

• Establish clear ways of working across engineering, operations, architecture, cloud, identity, endpoint and application teams.

• Promote operational excellence, automation-first thinking, accountability, continual learning and measurable service improvement.

Technical Depth and Cross-Platform Operations

• Maintain strong hands-on knowledge across ZIA, ZPA, Client Connector, App Connectors, Private Service Edges, cloud connectors and related identity and endpoint integrations.

• Understand dependencies across Azure networking, VMware, data center networks, internet egress, DNS, TLS, routing, proxies, firewalls and identity federation.

• Guide engineers through advanced troubleshooting using evidence-based analysis rather than trial-and-error changes.

• Translate operational findings into Zscaler product improvements, API automation requirements, Terraform backlog items, policy refinements and engineering actions.

Focus Areas

• Candidates should be prepared to discuss practical examples of Zscaler operations, Zscaler product automation and production incident leadership, including:

• Operating ZIA and ZPA at enterprise scale with service health metrics, monitoring, runbooks and escalation processes.

• Building Zscaler product automation using OneAPI, Zscaler APIs, Terraform providers, Terraform modules or API clients for ZIA and ZPA configuration, validation, reporting or health checks. Leading a major Zscaler production incident from triage through service restoration, root cause analysis and prevention of recurrence.

• Managing configuration drift, policy exceptions, administrative access risks and operational audit evidence.

• Troubleshooting across Client Connector, identity, ZPA policy, Service Edge, App Connector, DNS, routing, TLS and target application layers.

• Defining a 90-day improvement plan for Zscaler operations and product automation in a large global enterprise.

Skills and Attributes for Success

We are interested in candidates who bring hands-on Zscaler operations experience, Zscaler product automation capability, disciplined service ownership and the ability to lead operational delivery in complex enterprise environments.

As a successful candidate, you will demonstrate:

• Strong operational leadership across ZIA, ZPA, Client Connector, App Connectors, Private Service Edges and related Zscaler services.

• Ability to lead incident response, root cause analysis, problem management and service restoration for complex network security platforms.

• Hands-on Zscaler product automation experience using OneAPI, Zscaler APIs, Terraform providers, Terraform modules, Zscaler Terraformer or supported API clients.

• Strong understanding of governance, change control, configuration standards, access reviews, audit evidence and service reliability practices.

• Deep troubleshooting capability across DNS, routing, TLS, proxy, firewall, identity, endpoint and cloud networking layers.

• Clear communication style for service health, operational risk, incident status and improvement plans.

To Qualify for the Role, You Must Have

• Bachelor’s degree in Computer Science, Information Technology, Engineering or equivalent experience.

• 10-14 years of experience in network security, cloud security, security operations, infrastructure security or security engineering.

• 5+ years of hands-on Zscaler experience, with strong operational exposure across ZIA, ZPA and related platform capabilities.

• Experience leading incident response, root cause analysis, problem management, change control and operational governance for business-critical security services.

• Hands-on experience automating Zscaler product configuration and operations using OneAPI, Zscaler APIs, Terraform providers, Terraform modules, Zscaler Terraformer or equivalent supported product tooling.

• Working knowledge of Microsoft Entra ID or equivalent identity providers using SAML, SCIM, groups, device posture and conditional access signals.

• Strong understanding of Azure networking, VMware-based data centers, hybrid connectivity, internet egress, routing, DNS, TLS, PKI, proxies and enterprise firewall concepts.

• Experience leading engineers or technical operations teams in a global enterprise environment.

Ideally, You’ll Also Have

• Experience with Zscaler Terraform providers for ZIA and ZPA, Zscaler Terraform modules, Zscaler OneAPI, API clients and automated reporting workflows.

• Experience using Zscaler Terraformer or equivalent supported tooling to import existing ZIA and ZPA configurations into Terraform-managed workflows.

• Experience operating and automating Zscaler services across Azure cloud, VMware-based data centers and large-scale hybrid enterprise networks.

• Experience using ZDX or equivalent Zscaler telemetry and digital experience data for troubleshooting and service improvement.

• Strong understanding of SASE, SSE, Zero Trust, ZTNA, secure internet access, private application access and operational security controls.

• Zscaler, Azure Network Engineer Associate, Azure Security Engineer, CCNP Security, CISSP, CCSP or equivalent certifications.

What We Look For

We are looking for a senior, hands-on operations leader who can keep Zscaler services reliable, lead engineers through complex incidents, drive Zscaler product automation and improve operational maturity across global enterprise environments.

The ideal candidate has successfully operated and automated ZIA, ZPA, Client Connector, App Connectors, Private Service Edges and related Zscaler services using supported Zscaler APIs, OneAPI, Terraform providers, Terraform modules and product-native automation approaches.

What We Offer

At EY, we offer a competitive remuneration package where you’ll be rewarded for your individual and team performance. Our comprehensive Total Rewards package includes support for flexible working, career development and benefits that support your personal and professional priorities.

Plus, we offer:

• Support, coaching and feedback from engaging colleagues.

• Opportunities to develop new skills and progress your career.

• Exposure to large-scale global technology and cybersecurity transformation programs.

• The freedom and flexibility to handle your role in a way that’s right for you.

EY is committed to being an inclusive employer and we are happy to consider flexible working arrangements. We strive to achieve the right balance for our people, enabling us to deliver excellent client service while supporting your career and personal priorities.

EY | Building a better working world

EY exists to build a better working world, helping to create long-term value for clients, people and society and build trust in the capital markets.

Enabled by data and technology, diverse EY teams in over 150 countries provide trust through assurance and help clients grow, transform and operate.

Working across assurance, consulting, law, strategy, tax and transactions, EY teams ask better questions to find new answers for the complex issues facing our world today.