Lead Network Security Engineer - ZTNA
IDFC FIRST Bank · Mumbai
- Experience10+ yrs
- SalaryNot disclosed
- Work modeunknown
- Levellead
- Posted18 Sept 2026
About IDFC FIRST Bank
IDFC FIRST Bank is hiring in Mumbai in financial services. This role looks for around 10+ years of experience.
The role
Lead Network Security Engineer for ZTNA & Zero Trust Access at a regulated banking environment; design and operate identity-driven access controls for internal users, third parties, and partners. Hands-on ZTNA/Zero Trust architecture, identity-based access with authentication and authorization, and network fundamentals to troubleshoot access and connectivity, including HTTP, HTTPS, DNS, and TCP/IP; also working with SIEM/SOC workflows and regulated controls. Based in Mumbai, Maharashtra, India; work mode not specified.
Full job description
Job Requirements
Lead Network Security Engineer (ZTNA & Zero Trust Access)
Experience: 10+ years
Employment Type: Full-time
Role Overview
We are seeking a Lead Network Security Engineer – ZTNA & Zero Trust Access to design and operate identity-driven access controls in a regulated banking environment.
This role focuses on Zero Trust Network Access (ZTNA) for users, vendors, and applications, while working closely with teams responsible for SWG, firewalls, and Web/API Protection.
Key Responsibilities
Primary Focus – ZTNA
Design and implement ZTNA-based access models for internal users, third parties, and partners.Reduce dependency on traditional VPNs by deploying identity-aware, device-aware access controls.Integrate ZTNA with identity providers, endpoint posture, and risk-based access policies.Support secure access to on-prem and cloud-hosted applications.
Security Operations & Governance
Monitor ZTNA access logs and anomalies; integrate with SIEM and SOC workflows.Participate in incident response related to unauthorized access or identity misuse.Ensure ZTNA implementation aligns with regulatory and audit requirements.Maintain architecture documentation and SOPs.
Required Skills
Hands-on experience implementing ZTNA / Zero Trust access architectures.Strong understanding of identity-based access, authentication, and authorization models.Knowledge of network fundamentals to troubleshoot access and connectivity issues. Ability to troubleshoot network and security issues in complex environments. Strong understanding of cloud security principles, including SaaS, IaaS, and PaaS. Knowledge of security frameworks such as ISO 27001, NIST, or GDPR is a plus. Hands-on experience with networking protocols such as HTTP, HTTPS, DNS, and TCP/IP. Strong communication skills and the ability to collaborate with teams across various functions. Certifications in network security (e.g., CCSP, CISSP, CompTIA Security+, or equivalent) are a plus.Experience operating security controls in regulated environments.
Good to Have
Exposure to Secure Web Gateway (SWG) platforms.Understanding of network firewalls and perimeter security.Familiarity with Web & API Protection / WAF.Experience with endpoint posture, EDR, and device trust models.Awareness of SASE / SSE architectures.