Network Security Sme – Firewall / Vpn (Zscaler Zpa) / Proxy

Network Security SME – Firewall / VPN (Zscaler ZPA) / Proxy About the Role We are looking for a hands-on Network Security SME to own end-to-end implementation, troubleshooting, and support across - Firewall, VPN, and Proxy security stack - with a strong focus on Zscaler Private Access (ZPA) . This is a technical, individual-contributor role for someone who wants to stay deep in hands-on security engineering rather than move into people management. This is a hands-on technical SME role, not a leadership/managerial position - please apply only if you are currently working hands-on with the technologies below. Must-Have Requirements (please do not apply if you do not meet these) 10+ years of hands-on cybersecurity experience specifically in Firewall, Proxy, VPN, and IPS . Proven end-to-end implementation experience with Zscaler Private Access (ZPA) - this is mandatory, not just administration or day-to-day support. Deep, hands-on troubleshooting experience with Zscaler VPN and firewall platforms (Palo Alto and/or Cisco). Strong working knowledge of network protocols: TCP/IP, UDP, DHCP, FTP, SFTP, SNMP, SMTP, SSH, SSL, DNS, RDP, HTTP/HTTPS. Experience with proxy technologies: Forward, Reverse, Transparent, and Web 2.0 proxies, including SSL interception/MITM and data leakage prevention. Key Responsibilities Own hands-on implementation, customization, coding, and support of Firewall (Palo Alto, Cisco), VPN (Zscaler ZPA), and Proxy solutions. Perform deep troubleshooting on Zscaler VPN and other firewall/proxy platforms. Monitor network performance, troubleshoot issues, and deploy solutions. Act as SME on complex technical issues across Firewall, VPN, and Proxy - including assessing current security posture, documenting current/future state, and providing roadmap/gap analysis. Provide front-line technical support to end users on access-related issues. Log and track incidents/service requests via Service Management tools (e.g., ISM, ServiceNow, BMC Remedy), following ITIL incident and problem management practices. Good to Have Experience with Checkpoint firewalls. Knowledge of Linux and web/application servers (Apache/IIS/Tomcat/WebSphere). Familiarity with Security Incident Event Management tools (e.g., IBM QRadar SIEM). Working knowledge of Network Protocol Analyzers (tcpdump, Wireshark). Exposure to financial services / banking domain security environments. Qualifications Bachelor's degree in Engineering or a related field. Minimum 10 years of relevant cybersecurity experience (10–13+ years preferred). Strong written and verbal communication skills; customer-focused with the ability to multi-task and prioritize incidents/requests