Associate Director - Network Security

Security Technology Services - Network Security Technology

EY Technology

Technology has always been at the heart of what we do and deliver at EY. We need technology to keep an organization the size of ours working efficiently and securely. We have more than 400,000 people in over 150 countries, all of whom rely on secure technology to perform their jobs every day.

Everything we use as a firm depends on our security-first mindset. Our users, applications, cloud platforms, data centers, AI services, and business-critical systems all rely on modern security technologies to enable secure access, protect sensitive information, and reduce cyber risk.

Within Security Technology Services, our mission is to deliver world-class security engineering capabilities that enable Zero Trust, cloud transformation, attack surface reduction, and secure digital experiences. If you are passionate about building and engineering security solutions at global scale, we want to hear from you.

The Opportunity

We are looking for a Principal Engineer - Associate Director to join Security Technology Services as a senior hands-on engineering leader focused on Zscaler, Zero Trust and secure cloud networking integration.

This role is responsible for engineering, deployment, integration, automation, optimization and technical leadership of EY's global Zscaler platform and associated network security capabilities.

The successful candidate will operate as a deeply technical, hands-on subject matter expert across core Zscaler cloud capabilities, ZPA, Zscaler Client Connector, workload segmentation, Azure secure networking concepts, hybrid data center connectivity, Zscaler AI Firewall, AI Guard and Zero Trust access patterns.

This role will lead strategic engineering initiatives focused on:

- Azure secure networking integration

- Hybrid cloud security

- VMware data center segmentation

- Enterprise AI security using Zscaler AI Firewall and AI Guard

- Secure access transformation

The role will work closely with Network Security, Cloud Engineering, Application Security, Identity, Infrastructure, Architecture, and Product teams to engineer and deploy scalable enterprise security solutions globally.

Your Key Responsibilities

The Zscaler and Zero Trust Engineering Lead will provide senior technical leadership for the deployment, integration, optimization and continuous improvement of EY's global secure access and Zero Trust engineering platforms.

Zscaler Engineering Leadership:

- Serve as the senior hands-on engineering lead for core Zscaler cloud capabilities, including ZIA, ZPA, Zscaler Client Connector, App Connectors, Private Service Edges, Workload Communications, Microsegmentation, Zscaler AI Firewall and AI Guard.

- Engineer, deploy, configure and optimize large-scale Zscaler solutions supporting global business operations.

- Lead onboarding of enterprise applications, cloud services and business workloads into Zero Trust architectures.

- Drive adoption of new Zscaler capabilities and engineering best practices.

- Develop reference configurations, reusable engineering patterns and deployment standards.

Azure Secure Networking Integration:

- Bring deep working knowledge of Azure secure networking patterns to support Zscaler integration across EY Azure environments.

- Understand, validate and troubleshoot Azure networking components including Virtual WAN, ExpressRoute, Azure Firewall, Application Gateway, Front Door, Private Link and Private Endpoint.

- Work with EY Azure architects to integrate Zscaler capabilities with Azure-hosted applications, workloads, AI platforms and infrastructure services.

- Translate Azure secure networking requirements into Zscaler engineering patterns, connectivity models and deployment standards.

- Partner closely with EY Azure architecture and cloud engineering teams to drive secure Zscaler product integration across Azure environments.

Zero Trust and Application Access Engineering:

- Lead migration of applications from traditional VPN and internet-facing architectures to Zero Trust models using ZPA.

- Engineer secure access models for internal users, external users, vendors, contractors and developers.

- Implement identity-aware access controls integrated with Entra ID, Conditional Access and device posture solutions.

- Engineer secure connectivity solutions for hybrid cloud and multi-cloud environments.

- Engineer application segmentation patterns that reduce attack surface and minimize lateral movement risk.

Workload Segmentation Engineering:

- Implement workload segmentation solutions across Azure and hybrid environments.

- Deploy and manage Zscaler Workload Communications capabilities.

- Engineer workload-to-workload and application-to-application segmentation policies.

- Secure east-west traffic between business-critical applications and services.

- Develop segmentation models for production, non-production, shared services and management environments.

Data Center and VMware Security Engineering:

- Engineer secure connectivity solutions across traditional data center environments.

- Deploy App Connectors and Private Service Edges in VMware-based infrastructure.

- Integrate Zscaler technologies with enterprise data center environments.

- Support migration of legacy applications into Zero Trust architectures.

- Support secure connectivity integration between on-premises data centers, Zscaler platforms and Azure cloud environments.

Engineering Automation and Platform Optimization:

- Build and maintain automation solutions to improve security engineering efficiency.

- Automate deployment, configuration validation and policy management activities.

- Utilize Terraform, Python, PowerShell, APIs and Infrastructure-as-Code approaches.

- Improve platform scalability, consistency and operational effectiveness through automation.

- Participate in development of future-state security engineering roadmaps.

Technical Leadership:

- Serve as the highest level engineering escalation point for complex technical issues.

- Lead troubleshooting of networking, routing, DNS, TLS, authentication and connectivity challenges.

- Mentor and coach engineers across Network Security Technology.

- Participate in architecture reviews, engineering governance and major transformation programs.

- Communicate complex technical concepts to engineering, architecture and executive stakeholders.

Skills and Attributes for Success:

We are interested in candidates who bring deep engineering experience from large global enterprise environments and can combine hands-on technical execution with practical leadership.

As a successful candidate, you will demonstrate:

- Strong hands-on engineering expertise across network security, cloud security and Zero Trust technologies.

- Deep troubleshooting and problem-solving capabilities.

- Ability to engineer and deploy security solutions at enterprise scale in partnership with platform architecture teams.

- Strong understanding of Azure secure networking, hybrid connectivity and cloud security integration patterns.

- Experience working across global teams and multiple technology disciplines.

- Strong communication and stakeholder management skills.

- Passion for automation, innovation and continuous improvement.

- Ability to operate effectively in fast-paced and highly complex environments.

To Qualify for the Role, You Must Have:

- Bachelor's degree in computer science, Information Technology, Engineering or equivalent experience.

- 15 - 20 years of Network Security and Security Engineering experience.

- 12 - 15 years of experience engineering, deploying or integrating cloud security and Zscaler technologies.

- 8 - 10 years leading engineering teams or large engineering initiatives.

- Expert-level experience with Zscaler technologies including ZIA and ZPA.

- Experience deploying and supporting enterprise-scale Zscaler environments.

- Experience implementing Zero Trust solutions and secure access architectures.

- Experience onboarding cloud-hosted and on-premises applications into ZPA.

- Experience supporting and troubleshooting Azure secure networking environments in partnership with Azure architecture teams.

- Experience deploying security solutions within VMware-based data centers.

- Strong understanding of TCP/IP, DNS, TLS, routing, BGP, PKI and enterprise networking concepts.

- Experience with automation technologies such as Python, Terraform, PowerShell and REST APIs.

- Strong English communication skills, both written and verbal.

Ideally, You'll Also Have:

- Deep expertise in Azure Virtual WAN, ExpressRoute, Azure Firewall Premium, Application Gateway, Front Door and Private Link.

- Experience deploying Zscaler Workload Communications and workload segmentation solutions.

- Experience reducing public IP exposure through Zero Trust architectures.

- Experience securing Azure IaaS, PaaS and AKS environments.

- Experience integrating Zscaler with Microsoft Entra ID and Conditional Access.

- Strong understanding of SASE and SSE security architectures.

- Experience securing AI, GenAI and cloud-native workloads using Zscaler AI Firewall and AI Guard.

- Zscaler Certifications focused on ZIA, ZPA, Client Connector, workload segmentation, AI Firewall, AI Guard or equivalent hands-on platform engineering credentials.

- Azure Network Engineer Associate or Azure Security Engineer certifications.

- CISSP, CCSP, CCNP or equivalent certifications.