Assistant Manager

Zscaler / SSE Security Engineer (L2 Assistant Manager)

Products: Zscaler (Proxy) | FortiGate

Role Level: Assistant Manager L2

Shift: 247

Location: Belapur

Role Overview

We are seeking an experienced Zscaler / Security Engineer to implement and manage a Hybrid Security Service Edge (HSSE) environment with Zero Trust Network Architecture (ZTNA) for a large banking enterprise.

The role focuses on designing, implementing, and operating a secure, scalable, resilient, and highly available security architecture , ensuring compliance with RBI, CERTIn, Indian IT laws , and applicable global regulatory requirements .

Key Responsibilities

1 Hybrid SSE & Zero Trust Architecture

• Design and implement Hybrid SSE (HSSE) by integrating:
• Cloudbased SSE platforms
• Onpremises security controls
• Implement Zero Trust Network Architecture (ZTNA) using:
• Identitybased, rolebased, and contextaware access
• Architect local internet breakout for bank branches and offices
• Ensure high availability, redundancy, DR, and scalability

2 CloudBased Security Service Edge

• Deploy and manage cloudbased SSE to secure:
• Internet access
• Cloud & SaaS applications
• Implement and manage security controls including:
• Secure Web Gateway (SWG)
• CASB
• FirewallasaService (FWaaS)
• Advanced Threat Protection
• URL filtering & malware protection

3 OnPrem Secure Web Gateway

• Design and operate onprem SWG for:
• Critical servers
• Internetfacing systems
• Integrate onprem SWG with cloud SSE for unified policy enforcement

4 Private Access / Cloud VPN

• Implement Cloud VPN / Private Application Access
• Enable leastprivilege, rolebased access to internal applications
• Integrate with:
• IAM
• MFA
• Device posture checks

5 Data Loss Prevention (DLP)

• Implement DLP controls for internet and private application access
• Prevent exposure of sensitive data and PII in line with:
• RBI & CERTIn guidelines
• Data privacy & data localization mandates
• Define and enforce data classification & protection policies

6 Local Internet Breakout & Global Offices

• Enable local internet breakout for branches routed via HSSE
• Migrate internet proxy solutions for ~10 international offices
• Ensure compliance with countryspecific regulatory requirements

7 Compliance & Governance

• Ensure adherence to:
• RBI, CERTIn, Indian IT Act
• Applicable international regulatory mandates
• Bank Information Security Policy Framework
• Support:
• Audits
• VA/PT
• Regulatory inspections
• Compliance reporting

8 Managed Services & Operations (L2)

• Provide 247 security operations support , including:
• Monitoring & incident response
• Policy & change management
• Define and manage:
• SLAs, KPIs, SOPs
• Escalation matrices
• Coordinate with:
• Internal teams
• OEMs
• Bank stakeholders

Technical Skills Required

• SSE / SASE platforms: Zscaler , Palo Alto Prisma, Netskope, Forcepoint
• Zero Trust / ZTNA architecture
• Secure Web Gateway (Cloud & OnPrem)
• VPN, Private Access & Remote Access Security
• DLP (Network / Cloud)
• IAM, MFA, SSO integrations
• Network Security: Firewalls, Proxies, Routing (FortiGate preferred)
• High Availability & Disaster Recovery
• Compliance & Audit Support

Education

• BE / ME Computer / IT / ECE or allied branches
• B.Tech / M.Tech Computer / IT / ECE
• MCA
• MSc Computer / IT & allied branches

Certifications (Preferred)

• CCSP
• AZ305 (Azure Solutions Architect Expert)
• AWS Certified Solutions Architect
• GCP Professional Cloud Certifications
• OEM certifications (Professional / Advanced / Expert) in SSE / Cloud Security

Experience

• 5+ years total experience
• 3+ years handson experience in implementing and managing SSE / SASE solutions