Zscaler Network Security-Principal engineer- Associate director

At EY, you’ll have the chance to build a career as unique as you are, with the global scale, support, inclusive culture and technology to become the best version of you. And we’re counting on your unique voice and perspective to help EY become even better, too. Join us and build an exceptional experience for yourself, and a better working world for all.

Security Technology Services – Network Security Technology

EY Technology

Technology has always been at the heart of what we do and deliver at EY. We need technology to keep an organization the size of ours working efficiently and securely. We have more than 400,000 people in over 150 countries, all of whom rely on secure technology to perform their jobs every day.

Everything we use as a firm depends on our security-first mindset. Our users, applications, cloud platforms, data centers, AI services, and business‑critical systems all rely on modern security technologies to enable secure access, protect sensitive information, and reduce cyber risk.

Within Security Technology Services, our mission is to deliver world‑class security engineering capabilities that enable Zero Trust, cloud transformation, attack surface reduction, and secure digital experiences. If you are passionate about building and engineering security solutions at global scale, we want to hear from you.

The Opportunity

We are looking for a Principal Engineer – Associate Director to join Security Technology Services as a senior hands‑on engineering leader focused on Zscaler, Zero Trust and secure cloud networking integration.

This role is responsible for engineering, deployment, integration, automation, optimization and technical leadership of EY’s global Zscaler platform and associated network security capabilities.

The successful candidate will operate as a deeply technical, hands‑on subject matter expert across core Zscaler cloud capabilities, ZPA, Zscaler Client Connector, workload segmentation, Azure secure networking concepts, hybrid data center connectivity, Zscaler AI Firewall, AI Guard and Zero Trust access patterns.

This role will lead strategic engineering initiatives focused on:

• Enterprise AI security using Zscaler AI Firewall and AI Guard
• Secure access transformation

The role will work closely with Network Security, Cloud Engineering, Application Security, Identity, Infrastructure, Architecture, and Product teams to engineer and deploy scalable enterprise security solutions globally.

Your Key Responsibilities

The Zscaler and Zero Trust Engineering Lead will provide senior technical leadership for the deployment, integration, optimization and continuous improvement of EY’s global secure access and Zero Trust engineering platforms.

Zscaler Engineering Leadership

• Serve as the senior hands‑on engineering lead for core Zscaler cloud capabilities, including ZIA, ZPA, Zscaler Client Connector, App Connectors, Private Service Edges, Workload Communications, Microsegmentation, Zscaler AI Firewall and AI Guard.
• Engineer, deploy, configure and optimize large‑scale Zscaler solutions supporting global business operations.
• Lead onboarding of enterprise applications, cloud services and business workloads into Zero Trust architectures.
• Drive adoption of new Zscaler capabilities and engineering best practices.
• Develop reference configurations, reusable engineering patterns and deployment standards.
• Bring deep working knowledge of Azure secure networking patterns to support Zscaler integration across EY Azure environments.
• Understand, validate and troubleshoot Azure networking components including Virtual WAN, ExpressRoute, Azure Firewall, Application Gateway, Front Door, Private Link and Private Endpoint.
• Work with EY Azure architects to integrate Zscaler capabilities with Azure‑hosted applications, workloads, AI platforms and infrastructure services.
• Translate Azure secure networking requirements into Zscaler engineering patterns, connectivity models and deployment standards.
• Partner closely with EY Azure architecture and cloud engineering teams to drive secure Zscaler product integration across Azure environments.

Zero Trust and Application Access Engineering

• Lead migration of applications from traditional VPN and internet‑facing architectures to Zero Trust models using ZPA.
• Engineer secure access models for internal users, external users, vendors, contractors and developers.
• Implement identity‑aware access controls integrated with Entra ID, Conditional Access and device posture solutions.
• Engineer secure connectivity solutions for hybrid cloud and multi‑cloud environments.
• Engineer application segmentation patterns that reduce attack surface and minimize lateral movement risk.
• Implement workload segmentation solutions across Azure and hybrid environments.
• Deploy and manage Zscaler Workload Communications capabilities.
• Engineer workload‑to‑workload and application‑to‑application segmentation policies.
• Secure east‑west traffic between business‑critical applications and services.
• Develop segmentation models for production, non‑production, shared services and management environments.

Data Center and VMware Security Engineering

• Engineer secure connectivity solutions across traditional data center environments.
• Deploy App Connectors and Private Service Edges in VMware‑based infrastructure.
• Integrate Zscaler technologies with enterprise data center environments.
• Support migration of legacy applications into Zero Trust architectures.
• Support secure connectivity integration between on‑premises data centers, Zscaler platforms and Azure cloud environments.

Engineering Automation and Platform Optimization

• Build and maintain automation solutions to improve security engineering efficiency.
• Automate deployment, configuration validation and policy management activities.
• Utilize Terraform, Python, PowerShell, APIs and Infrastructure-as-Code approaches.
• Improve platform scalability, consistency and operational effectiveness through automation.
• Participate in development of future‑state security engineering roadmaps.

Technical Leadership

• Serve as the highest level engineering escalation point for complex technical issues.
• Lead troubleshooting of networking, routing, DNS, TLS, authentication and connectivity challenges.
• Mentor and coach engineers across Network Security Technology.
• Participate in architecture reviews, engineering governance and major transformation programs.
• Communicate complex technical concepts to engineering, architecture and executive stakeholders.

Skills and Attributes for Success

We are interested in candidates who bring deep engineering experience from large global enterprise environments and can combine hands‑on technical execution with practical leadership.

As a successful candidate, you will demonstrate:

• Strong hands‑on engineering expertise across network security, cloud security and Zero Trust technologies.
• Deep troubleshooting and problem‑solving capabilities.
• Ability to engineer and deploy security solutions at enterprise scale in partnership with platform architecture teams.
• Strong understanding of Azure secure networking, hybrid connectivity and cloud security integration patterns.
• Experience working across global teams and multiple technology disciplines.
• Strong communication and stakeholder management skills.
• Passion for automation, innovation and continuous improvement.
• Ability to operate effectively in fast‑paced and highly complex environments.

To Qualify for the Role, You Must Have

• Bachelor’s degree in computer science, Information Technology, Engineering or equivalent experience.
• 15-20 years of Network Security and Security Engineering experience.
• 12-15 years of experience engineering, deploying or integrating cloud security and Zscaler technologies.
• 8-10 years leading engineering teams or large engineering initiatives.
• Expert‑level experience with Zscaler technologies including ZIA and ZPA.
• Experience deploying and supporting enterprise‑scale Zscaler environments.
• Experience implementing Zero Trust solutions and secure access architectures.
• Experience onboarding cloud‑hosted and on‑premises applications into ZPA.
• Experience supporting and troubleshooting Azure secure networking environments in partnership with Azure architecture teams.
• Experience deploying security solutions within VMware‑based data centers.
• Strong understanding of TCP/IP, DNS, TLS, routing, BGP, PKI and enterprise networking concepts.
• Experience with automation technologies such as Python, Terraform, PowerShell and REST APIs.
• Strong English communication skills, both written and verbal.

Ideally, You’ll Also Have

• Deep expertise in Azure Virtual WAN, ExpressRoute, Azure Firewall Premium, Application Gateway, Front Door and Private Link.
• Experience deploying Zscaler Workload Communications and workload segmentation solutions.
• Experience reducing public IP exposure through Zero Trust architectures.
• Experience securing Azure IaaS, PaaS and AKS environments.
• Experience integrating Zscaler with Microsoft Entra ID and Conditional Access.
• Strong understanding of SASE and SSE security architectures.
• Experience securing AI, GenAI and cloud‑native workloads using Zscaler AI Firewall and AI Guard.
• Zscaler Certifications focused on ZIA, ZPA, Client Connector, workload segmentation, AI Firewall, AI Guard or equivalent hands‑on platform engineering credentials.
• Azure Network Engineer Associate or Azure Security Engineer certifications.
• CISSP, CCSP, CCNP or equivalent certifications.

What We Look For

We are looking for a highly technical engineering leader who remains hands‑on, leads by example and is comfortable solving complex security challenges across global cloud, data center and Zero Trust environments.

The ideal candidate has successfully integrated and deployed Zscaler technologies across Azure, enterprise data centers, and hybrid cloud environments, possesses deep networking expertise, and can engineer scalable Zero Trust solutions in partnership with EY Azure architects and platform teams.

What working at EY offers

At EY, we offer a competitive remuneration package where you’ll be rewarded for your individual and team performance. Our comprehensive Total Rewards package includes support for flexible working, career development and benefits that support your personal and professional priorities.

Plus, we offer:

• Support, coaching and feedback from engaging colleagues.
• Opportunities to develop new skills and progress your career.
• Exposure to large‑scale global technology and cybersecurity transformation programs.
• The freedom and flexibility to handle your role in a way that’s right for you.

EY is committed to being an inclusive employer and we are happy to consider flexible working arrangements. We strive to achieve the right balance for our people, enabling us to deliver excellent client service while supporting your career and personal priorities.

EY exists to build a better working world, helping to create long‑term value for clients, people and society and build trust in the capital markets.

Enabled by data and technology, diverse EY teams in over 150 countries provide trust through assurance and help clients grow, transform and operate.

Working across assurance, consulting, law, strategy, tax and transactions, EY teams ask better questions to find new answers for the complex issues facing our world today.