Zero Trust Network Access Engineer

The Remote Access team within End User Computing is responsible for delivering secure remote access solutions for corporate and BYOD devices across Windows, macOS, and iOS platforms.

This role focuses on the engineering, automation, and ongoing development of Zero Trust Network Access (ZTNA) infrastructure. You will drive automation, enhance user experience, improve security, and work closely with product and programme teams in an agile environment., * Identify and implement automation and telemetry enhancement opportunities.

• Build and maintain CI/CD pipelines for automated configuration and code deployment.
• Design and develop Zero Trust Network Access solutions.
• Ensure adherence to SDLC, engineering standards, and release management processes.
• Provide L3 support, problem management, and vendor engagement.
• Create and maintain technical documentation, including designs, release notes, and test cases.
• Collaborate with technology and security teams to ensure platforms remain secure, scalable, and cost-effective.
• Continuously improve platform performance and user experience.

• Extensive experience delivering VPN, remote access, and cybersecurity solutions within large enterprise environments.
• Strong understanding of networking concepts and protocols, including:
• IP Routing
• TLS/SSL VPN
• IKEv2/ESP
• ActiveSync
• ICA
• RDP
• Experience designing resilient and highly available infrastructure environments.
• Strong expertise with:
• Palo Alto Prisma Access
• Zero Trust Network Access (ZTNA)
• Prisma Access APIs
• Experience with:
• Azure Active Directory
• Conditional Access
• DNS, DHCP, PKI
• SAML Authentication
• Azure MFA
• API integration and testing experience using tools such as Postman or Bruno.
• Python development experience.
• Strong troubleshooting and problem-solving skills.
• Experience working within Agile environments.
• Knowledge of tools including:
• Jira
• Confluence
• Splunk
• Wireshark
• Fiddler
• ServiceNow
• Experience with Windows, macOS, iOS, and Android environments is advantageous.

Education & Certifications

• Bachelor’s degree or equivalent experience.
• Agile or ITIL certification preferred.
• Relevant networking or cybersecurity certifications are advantageous., * Hands-on engineer with excellent communication and documentation skills.
• Strong networking and security background.
• Agile-minded and delivery-focused.
• Able to work effectively with both technical and non-technical stakeholders.
• Methodical, organised, and focused on continuous improvement.
• Comfortable working with global teams across multiple time zones.
• Proactively keeps up to date with emerging security threats and industry best practices.