Security Engineer

At EY, we’re all in to shape your future with confidence.

We’ll help you succeed in a globally connected powerhouse of diverse teams and take your career wherever you want it to go. Join EY and help to build a better working world.

Technology has always been at the heart of what we do and deliver  need technology to keep an organization the size of ours working efficiently and securely. We have more than 400,000 people in over 150 countries, all of whom rely on secure technology to perform their jobs every day.

Everything we use as a firm depends on our security‑first mindset. Our users, applications, cloud platforms, data centers, Al services, and business‑critical systems all rely on modern security technologies to enable secure access, protect sensitive information, and reduce cyber risk.

Within Security Technology Services, our mission is to deliver world‑class security engineering capabilities that enable Zero Trust, cloud transformation, attack surface reduction, and secure digital experiences. lf you are passionate about building and engineering security solutions at global scale, we want to hear from you.

We are looking for a Network Security Engineer
- Assistant Director to join Security Technology Services as a hands‑on engineering specialist focused on Zscaler Cloud, Zscaler Private Access (ZPA), autonomous user‑to‑application segmentation, least‑privilege access, and workload segmentation across data centre and cloud environments.

This role will be responsible for detailed engineering, deployment, configuration, testing, troubleshooting and optimisation of Zscaler‑based Zero Trust access and segmentation capabilities.

The successful candidate will operate as a deeply technical, hands‑on engineer across Zscaler Cloud, ZPA, App Connectors, Private Service Edges, Zscaler Client Connector, autonomous user‑to‑app segmentation, least‑privilege access policies, cloud workload segmentation and data centre workload segmentation.

This role will support engineering initiatives focused on:

• Zscaler Cloud and ZPA engineering for private application access
• ZPA autonomous user‑to‑application segmentation and policy recommendations
• Least‑privilege access design and enforcement for users, groups and applications
• Data centre, VMware and cloud workload segmentation
• Reduction of lateral movement and public/private application attack surface

The role will work closely with the Associate Director, Network Security Technology teams, Cloud Engineering, Application Security, ldentity, lnfrastructure and Architecture teams to deploy scalable enterprise Zero Trust segmentation solutions globally.

The Network Security Engineer
- Assistant Director will provide hands‑on engineering support for the deployment, integration, optimisation and continuous improvement of Zscaler Cloud, ZPA and workload segmentation capabilities.

Zscaler Cloud and ZPA Engineering

• Deploy, configure and troubleshoot Zscaler Cloud and ZPA components including App Connectors, Private Service Edges, application segments, access policies and connector groups.
• lmplement ZPA access models that provide application‑level access without extending broad network access to users.
• Support onboarding of internal applications, developer services, administrative tools and business workloads into ZPA.
• Validate routing, DNS, TLS, SAML, SClM, identity provider and device posture integrations required for successful ZPA deployments.
• Maintain engineering documentation, implementation standards, test evidence and operational handover materials.

Azure Secure Networking Integration

• Bring deep working knowledge of Azure secure networking patterns to support Zscaler integration across EY Azure environments.
• Understand, validate and…