Lead System Engineer- Network Security

Lead Network Engineer – Security

Role Type: Full-time • Level: Senior Project Engineer
Location: Bangalore • Reports to: Network Infrastructure Project Manager
Teams interfaced: Business Units, Architecture, Security, PMO, Vendors

Role Summary

We are seeking a Lead Network Engineer – Security with strong expertise in Zscaler Secure Web Gateway and LAN technologies (HP Aruba & ClearPass) to lead design and deployment activities for network security and user access solutions. The candidate will work independently to understand business needs, propose optimized solutions, and implement them end-to-end. The role also involves advising on Zscaler subscriptions and services to ensure cost-effective and secure deployments.

Key Responsibilities

Zscaler Secure Web Gateway

• Engage with business teams to understand requirements and translate them into Zscaler solution designs.
• Propose optimized configurations and subscription models based on usage and security needs.
• Prepare detailed design documents and deployment plans for Zscaler services.
• Execute end-to-end implementation, including policy configuration, integration with identity providers, and traffic steering.
• Validate deployment through testing and performance optimization.

LAN & Access Control (HP Aruba & ClearPass)

• Design and deploy LAN solutions for user connectivity using HP Aruba switches.
• Implement ClearPass for network access control, including profiling, authentication, and policy enforcement.
• Ensure seamless integration with existing network and security infrastructure.

Project Execution

• Own the design, build, and deployment phases for assigned projects.
• Prepare LLDs, configuration templates, and implementation guides.
• Conduct UAT and cutover activities, ensuring minimal disruption.
• Provide status updates, risk assessments, and documentation to stakeholders.

Core Technology Scope

• Secure Web Gateway: Zscaler (ZIA, ZPA, policy design, traffic steering, identity integration)
• LAN: HP Aruba switches (Access layer design, VLANs, QoS)
• Access Control: ClearPass (802.1X, NAC, profiling, policy enforcement)
• Integration: Identity providers (AD, Azure AD), VPN solutions
• Networking Fundamentals: Routing, switching, DNS, DHCP
• Preferred: Familiarity with SD-WAN concepts (basic awareness)

Qualifications

• 8-10 + years in network/security engineering with hands-on on the technologies mentioned above
• Proven ability to design and deploy Zscaler solutions independently.
• Strong knowledge of LAN technologies and ClearPass NAC.
• Ability to translate business needs into technical solutions.
• Excellent documentation and stakeholder communication skills.

Preferred Certifications

• Zscaler Certified Professional (ZCP) or equivalent
• HP Aruba Certified Switching Professional (ACSP)
• ClearPass Certified Professional (ACCP)
• Networking certifications (CCNP, etc.)

Success Metrics

• Successful delivery of Zscaler and LAN projects within agreed timelines.
• Optimized subscription and service utilization for Zscaler.
• Positive feedback from business stakeholders on solution effectiveness.

“We are committed to creating a diverse environment and are proud to be an equal opportunity employer. All qualified applicants receive consideration for employment without regard to race, color, religion, gender, gender identity or expression, sexual orientation, national origin, genetics, disability, age, or veteran status”

At Société Générale, we are convinced that people are drivers of change, and that the world of tomorrow will be shaped by all their initiatives, from the smallest to the most ambitious.

Whether you’re joining us for a period of months, years or your entire career, together we can have a positive impact on the future. Creating, daring, innovating and taking action are part of our DNA.

If you too want to be directly involved, grow in a stimulating and caring environment, feel useful on a daily basis and develop or strengthen your expertise, you will feel right at home with us!

Still hesitating?

You should know that our employees can dedicate several days per year to solidarity actions during their working hours, including sponsoring people struggling with their orientation or professional integration, participating in the financial education of young apprentices and sharing their skills with charities. There are many ways to get involved.

We are committed to support accelerating our Group’s ESG strategy by implementing ESG principles in all our activities and policies. They are translated in our business activity (ESG assessment, reporting, project management or IT activities), our work environment and in our responsible practices for environment protection