About VAYUZ :

We are an Engineering company with leading capabilities in Digital Transformation, Internet-related services and products, Data Science, Development Operations, Product as a Service, Technology Consulting, and Software Engineering. We are trusted by NSE giants as a digital transformation partner and have a proven track record in providing customized digital solutions across industry segments.

Core Offerings :

- Cloud : Migration, infrastructure management, SaaS, PaaS, IaaS.

- Data : Analytics, BI tools, predictive analytics, data-driven decisions.

- AI/ML : Automation, models, NLP.

- Digital Workplace : Remote work, virtual desktops, employee experience.

- IoT : Connected devices, analytics, smart infrastructure.

- Mobile/Web : Custom apps, PWAs, mobile-first design.

- Legacy Modernization : Upgrades, refactoring, integration.

- DevOps/Agile : Implementation, methodology for faster delivery.

Job Description :

- Lead Zero Trust strategy, assessment, and implementation initiatives across enterprise environments.

- Define and enforce least-privilege access principles for network and application communications.

- Analyze east-west traffic patterns and application dependencies to support Zero Trust adoption.

- Design and recommend micro-segmentation and application-based segmentation strategies.

- Review and optimize allow/deny policies to minimize unnecessary access while ensuring business continuity.

- Conduct network communication assessments using flow logs and packet capture analysis.

- Investigate blocked traffic, policy conflicts, and false-positive scenarios impacting application communication.

- Collaborate with infrastructure, security, cloud, and application teams to identify trust boundaries and security controls.

- Develop Zero Trust security policies, standards, and governance frameworks.

- Provide expert guidance on network-level and host-level security controls.

- Support security monitoring, threat investigations, and compliance initiatives through log analysis and SIEM platforms.

Qualifications :

- 8 years of experience in Zero trust sme

- Strong understanding of TCP/IP, ports and protocols

- hands on experience with Subnetting, routing, VLANs

- East-west traffic understanding (device-to-device communication)

- Network flow logs

- Network Packet capture basics

- Allow/Deny rules

- Least privilege network access concepts

- Micro-segmentation

- Application-based segmentation

- Active Directory GPO understanding

- Windows Servers Firewall and Linux iptables Understanding

- Identifying Blocked traffic issues, False positives

- Reading logs Using SIEM tools (Sentinel, Splunk)