{"id":1776222,"url":"https://alion.io/job/ernst-young-zscaler-network-security-principal-engineer-associate-director","title":"Zscaler Network Security-Principal engineer- Associate director","company":{"id":2859,"name":"EY","domain":"ey.com","url":"https://alion.io/company/ey-com","size_band":"5000+","is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"SuccessFactors","truth_index":null},"role":"Security","role_family":"Security","seniority":"head","employment_type":null,"work_mode":"on_site","remote_scope":null,"remote_scope_basis":null,"remote_working_hours":null,"hiring_geo_confidence":"structured","locations":["Bengaluru, India"],"countries":["IN"],"hiring_countries":[],"hiring_countries_total":0,"salary":null,"salary_estimate":{"min_usd":29000,"max_usd":70000,"period":"year","method":"global_role_cell_scaled_by_country","sample_n":269},"experience_years_min":15,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"Azure","optional":false},{"name":"Azure AKS","optional":false},{"name":"BGP","optional":false},{"name":"DNS","optional":false},{"name":"Microsoft Entra ID","optional":false},{"name":"PKI","optional":false},{"name":"Platform Engineering","optional":false},{"name":"PowerShell","optional":false},{"name":"Python","optional":false},{"name":"Rest API","optional":false},{"name":"TCP/IP","optional":false},{"name":"Terraform","optional":false},{"name":"VMWare","optional":false},{"name":"VPN","optional":false},{"name":"Zero Trust","optional":false},{"name":"Zscaler","optional":false},{"name":"Kubernetes","optional":true}],"status":"live","first_seen_at":"2026-10-03T02:00:00Z","employer_posted_date":"2026-10-03","last_verified_at":"2026-10-21T11:42:43Z","board_verified":true,"closed_at":null,"days_open":18,"trust":{"level":"ok","repost_count":null,"flags":[],"days_open":18},"description":"At EY, you’ll have the chance to build a career as unique as you are, with the global scale, support, inclusive culture and technology to become the best version of you. And we’re counting on your unique voice and perspective to help EY become even better, too. Join us and build an exceptional experience for yourself, and a better working world for all.\nSecurity Technology Services - Network Security Technology\nEY Technology\nTechnology has always been at the heart of what we do and deliver at EY. We need technology to keep an organization the size of ours working efficiently and securely. We have more than 400,000 people in over 150 countries, all of whom rely on secure technology to perform their jobs every day.\nEverything we use as a firm depends on our security-first mindset. Our users, applications, cloud platforms, data centers, AI services, and business-critical systems all rely on modern security technologies to enable secure access, protect sensitive information, and reduce cyber risk.\nWithin Security Technology Services, our mission is to deliver world-class security engineering capabilities that enable Zero Trust, cloud transformation, attack surface reduction, and secure digital experiences. If you are passionate about building and engineering security solutions at global scale, we want to hear from you.\nThe Opportunity\nWe are looking for a Principal Engineer - Associate Director to join Security Technology Services as a senior hands-on engineering leader focused on Zscaler, Zero Trust and secure cloud networking integration.\nThis role is responsible for engineering, deployment, integration, automation, optimization and technical leadership of EY’s global Zscaler platform and associated network security capabilities.\nThe successful candidate will operate as a deeply technical, hands-on subject matter expert across core Zscaler cloud capabilities, ZPA, Zscaler Client Connector, workload segmentation, Azure secure networking concepts, hybrid data center connectivity, Zscaler AI Firewall, AI Guard and Zero Trust access patterns.\nThis role will lead strategic engineering initiatives focused on:\nAzure secure networking integration\nHybrid cloud security\nVMware data center segmentation\nEnterprise AI security using Zscaler AI Firewall and AI Guard\nSecure access transformation\nThe role will work closely with Network Security, Cloud Engineering, Application Security, Identity, Infrastructure, Architecture, and Product teams to engineer and deploy scalable enterprise security solutions globally.\nYour Key Responsibilities\nThe Zscaler and Zero Trust Engineering Lead will provide senior technical leadership for the deployment, integration, optimization and continuous improvement of EY’s global secure access and Zero Trust engineering platforms.\nZscaler Engineering Leadership\nServe as the senior hands-on engineering lead for core Zscaler cloud capabilities, including ZIA, ZPA, Zscaler Client Connector, App Connectors, Private Service Edges, Workload Communications, Microsegmentation, Zscaler AI Firewall and AI Guard.\nEngineer, deploy, configure and optimize large-scale Zscaler solutions supporting global business operations.\nLead onboarding of enterprise applications, cloud services and business workloads into Zero Trust architectures.\nDrive adoption of new Zscaler capabilities and engineering best practices.\nDevelop reference configurations, reusable engineering patterns and deployment standards.\nAzure Secure Networking Integration\nBring deep working knowledge of Azure secure networking patterns to support Zscaler integration across EY Azure environments.\nUnderstand, validate and troubleshoot Azure networking components including Virtual WAN, ExpressRoute, Azure Firewall, Application Gateway, Front Door, Private Link and Private Endpoint.\nWork with EY Azure architects to integrate Zscaler capabilities with Azure-hosted applications, workloads, AI platforms and infrastructure services.\nTranslate Azure secure networking requirements into Zscaler engineering patterns, connectivity models and deployment standards.\nPartner closely with EY Azure architecture and cloud engineering teams to drive secure Zscaler product integration across Azure environments.\nZero Trust and Application Access Engineering\nLead migration of applications from traditional VPN and internet-facing architectures to Zero Trust models using ZPA.\nEngineer secure access models for internal users, external users, vendors, contractors and developers.\nImplement identity-aware access controls integrated with Entra ID, Conditional Access and device posture solutions.\nEngineer secure connectivity solutions for hybrid cloud and multi-cloud environments.\nEngineer application segmentation patterns that reduce attack surface and minimize lateral movement risk.\nWorkload Segmentation Engineering\nImplement workload segmentation solutions across Azure and hybrid environments.\nDeploy and manage Zscaler Workload Communications capabilities.\nEngineer workload-to-workload and application-to-application segmentation policies.\nSecure east-west traffic between business-critical applications and services.\nDevelop segmentation models for production, non-production, shared services and management environments.\nData Center and VMware Security Engineering\nEngineer secure connectivity solutions across traditional data center environments.\nDeploy App Connectors and Private Service Edges in VMware-based infrastructure.\nIntegrate Zscaler technologies with enterprise data center environments.\nSupport migration of legacy applications into Zero Trust architectures.\nSupport secure connectivity integration between on-premises data centers, Zscaler platforms and Azure cloud environments.\nEngineering Automation and Platform Optimization\nBuild and maintain automation solutions to improve security engineering efficiency.\nAutomate deployment, configuration validation and policy management activities.\nUtilize Terraform, Python, PowerShell, APIs and Infrastructure-as-Code approaches.\nImprove platform scalability, consistency and operational effectiveness through automation.\nParticipate in development of future-state security engineering roadmaps.\nTechnical Leadership\nServe as the highest level engineering escalation point for complex technical issues.\nLead troubleshooting of networking, routing, DNS, TLS, authentication and connectivity challenges.\nMentor and coach engineers across Network Security Technology.\nParticipate in architecture reviews, engineering governance and major transformation programs.\nCommunicate complex technical concepts to engineering, architecture and executive stakeholders.\nSkills and Attributes for Success\nWe are interested in candidates who bring deep engineering experience from large global enterprise environments and can combine hands-on technical execution with practical leadership.\nAs a successful candidate, you will demonstrate:\nStrong hands-on engineering expertise across network security, cloud security and Zero Trust technologies.\nDeep troubleshooting and problem-solving capabilities.\nAbility to engineer and deploy security solutions at enterprise scale in partnership with platform architecture teams.\nStrong understanding of Azure secure networking, hybrid connectivity and cloud security integration patterns.\nExperience working across global teams and multiple technology disciplines.\nStrong communication and stakeholder management skills.\nPassion for automation, innovation and continuous improvement.\nAbility to operate effectively in fast-paced and highly complex environments.\nTo Qualify for the Role, You Must Have\nBachelor’s degree in computer science, Information Technology, Engineering or equivalent experience.\n15-20 years of Network Security and Security Engineering experience.\n12-15 years of experience engineering, deploying or integrating cloud security and Zscaler technologies.\n8-10 years leading engineering teams or large engineering initiatives.\nExpert-level experience with Zscaler technologies including ZIA and ZPA.\nExperience deploying and supporting enterprise-scale Zscaler environments.\nExperience implementing Zero Trust solutions and secure access architectures.\nExperience onboarding cloud-hosted and on-premises applications into ZPA.\nExperience supporting and troubleshooting Azure secure networking environments in partnership with Azure architecture teams.\nExperience deploying security solutions within VMware-based data centers.\nStrong understanding of TCP/IP, DNS, TLS, routing, BGP, PKI and enterprise networking concepts.\nExperience with automation technologies such as Python, Terraform, PowerShell and REST APIs.\nStrong English communication skills, both written and verbal.\nIdeally, You’ll Also Have\nDeep expertise in Azure Virtual WAN, ExpressRoute, Azure Firewall Premium, Application Gateway, Front Door and Private Link.\nExperience deploying Zscaler Workload Communications and workload segmentation solutions.\nExperience reducing public IP exposure through Zero Trust architectures.\nExperience securing Azure IaaS, PaaS and AKS environments.\nExperience integrating Zscaler with Microsoft Entra ID and Conditional Access.\nStrong understanding of SASE and SSE security architectures.\nExperience securing AI, GenAI and cloud-native workloads using Zscaler AI Firewall and AI Guard.\nZscaler Certifications focused on ZIA, ZPA, Client Connector, workload segmentation, AI Firewall, AI Guard or equivalent hands-on platform engineering credentials.\nAzure Network Engineer Associate or Azure Security Engineer certifications.\nCISSP, CCSP, CCNP or equivalent certifications.\nWhat We Look For\nWe are looking for a highly technical engineering leader who remains hands-on, leads by example and is comfortable solving complex security challenges across global cloud, data center and Zero Trust environments.\nThe ideal candidate has successfully integrated and deployed Zscaler technologies across Azure, enterprise data centers, and hybrid cloud environments, possesses deep networking expertise, and can engineer scalable Zero Trust solutions in partnership with EY Azure architects and platform teams.\nWhat working at EY offers\nAt EY, we offer a competitive remuneration package where you’ll be rewarded for your individual and team performance. Our comprehensive Total Rewards package includes support for flexible working, career development and benefits that support your personal and professional priorities.\nPlus, we offer:\nSupport, coaching and feedback from engaging colleagues.\nOpportunities to develop new skills and progress your career.\nExposure to large-scale global technology and cybersecurity transformation programs.\nThe freedom and flexibility to handle your role in a way that’s right for you.\nEY is committed to being an inclusive employer and we are happy to consider flexible working arrangements. We strive to achieve the right balance for our people, enabling us to deliver excellent client service while supporting your career and personal priorities.\nEY | Building a better working world\nEY exists to build a better working world, helping to create long-term value for clients, people and society and build trust in the capital markets.\nEnabled by data and technology, diverse EY teams in over 150 countries provide trust through assurance and help clients grow, transform and operate.\nWorking across assurance, consulting, law, strategy, tax and transactions, EY teams ask better questions to find new answers for the complex issues facing our world today.","description_format":"text","description_chars":11512,"description_truncated":false,"requirements":{"experience_years_min":15,"management_years_min":8,"team_size_min":null,"manages_managers":false,"education":{"level":"bachelor","optional":true},"security_clearance":false,"languages":[{"language":"English","level":"Upper-Intermediate (B2)","optional":false}]},"benefits":["Flexible schedule"],"hiring_locations":[],"hiring_excludes":[],"relocation_offered":false,"industries":["Network Security","Financial Advisory, Valuation & Restructuring","Management Consulting","Tax Advisory & Preparation"],"lifecycle":[{"event":"open","at":"2026-10-03T16:36:26Z"}],"visa":[],"liveness":{"score":65,"band":"ok","label":"Likely open","p_open":1,"p_active":0.861,"p_room":0.75,"age_days":18,"expected_fill_days":21,"reasons":["conf:0","velocity","win:late","comp:brand"],"computed_at":"2026-10-21T05:46:15Z"},"pay":null,"html_url":"https://alion.io/job/ernst-young-zscaler-network-security-principal-engineer-associate-director","json_url":"https://alion.io/job/ernst-young-zscaler-network-security-principal-engineer-associate-director.json","meta":{"generated_at":"2026-10-21T11:48:26Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":16688,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-10-22T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.02,"usd":0.002,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":2859},"rest":"https://alion.io/mcp/rest/get_company?id=2859"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Fernst-young-zscaler-network-security-principal-engineer-associate-director"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":1,"usd":0.1},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Fernst-young-zscaler-network-security-principal-engineer-associate-director"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.02,"usd":0.002},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Fernst-young-zscaler-network-security-principal-engineer-associate-director"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/ernst-young-zscaler-network-security-principal-engineer-associate-director\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Fernst-young-zscaler-network-security-principal-engineer-associate-director"}]}