Technical Consultant - Network Security SASE

Key Responsibilities - SASE & Zero Trust:

• Configure and deploy Zscaler Internet Access (ZIA) components including Secure Web Gateway policy, SSL inspection, URL filtering, cloud firewall rules, and sandbox policy against an established design.
• Configure and deploy Zscaler Private Access (ZPA) application segments, App Connectors, and browser-based access for Zero Trust remote access.
• Configure Palo Alto Prisma Access GlobalProtect remote user connectivity, explicit proxy setup for branch offices, and service connections to on-premises infrastructure through Strata Cloud Manager or Panorama.
• Configure Cisco Secure Access Zero Trust Network Access, Secure Web Gateway, Cloud Access Security Broker, and resource connector deployment for private application access.
• Configure Netskope Security Cloud Next Gen SWG, CASB (API-enabled and inline), and Netskope Private Access traffic steering and policy enforcement.
• Implement traffic forwarding methods including GRE tunnels, IPsec tunnels, PAC files, and client connectors according to the design provided by the engagement architect.
• Configure identity-based access controls integrating with Okta, Microsoft Entra ID, SAML 2.0, and SCIM provisioning to enforce conditional access policy across SASE/SSE platforms.
• Deploy and tune Cloud Access Security Broker and Data Loss Prevention policy in inline and API-based modes under established policy guidelines.
• Execute platform health checks, policy tuning, and day-2 operational tasks across assigned SASE/SSE platforms.
• Support SASE and SD-WAN convergence testing, validating policy consistency across direct internet access and backhauled traffic paths.
• Contribute platform-specific input to client Zero Trust maturity roadmaps under the direction of the engagement lead.

Architecture, Delivery & Documentation:

• Participate in client-facing discovery sessions and design workshops, gathering requirements and validating current-state configuration for SASE/SSE scope.
• Contribute to High-Level Design and Low-Level Design documentation, network diagrams, and as-built documentation for assigned SASE/SSE workstreams.
• Execute migration and cutover tasks according to documented runbooks, rollback procedures, and change management workflows.
• Support knowledge transfer sessions, training client operations teams on day-2 SASE/SSE platform administration.
• Track assigned workstream milestones and escalate risks or scope changes to the project lead or Senior Technical Consultant.
• Identify client requests that fall outside the documented scope and escalate to the project manager or engagement lead before delivery impact occurs.

Practice Contribution:

• Mentor Associate and Senior Associate Technical Consultants on SASE/SSE platform fundamentals and troubleshooting techniques.
• Contribute to reusable delivery assets including configuration checklists, runbook templates, and knowledge base articles for the SASE/SSE practice.
• Pursue certification progression toward professional-level SASE/SSE credentials in the platform of primary focus.
• Support sales campaigns by validating technical scope and providing delivery continuity input to the account team, under the direction of the engagement Solutions Lead.