Zero Trust Network Access Engineer

We are a $13+ billion global technology company, home to more than 224,000 people across 60 countries, delivering industry-leading capabilities centered around digital, engineering, cloud, and AI, powered by a broad portfolio of technology services and products. HCLTech is a globally recognized leader in the Tech and IT industry, but we've never forgotten the startup mindset that got us here. We've always approached our work with an idea-first attitude because every one of our accomplishments —no matter how big or small —can be traced back to an idea's single spark. It's that spark —that inner drive —that sets our people apart from our competitors. It enables us not just to pull off game-changing feat after game-changing feat but to better our world in the process. We want you to find your spark. Because that's what drives you to be better, be more and ultimately, be more fulfilled. To learn more about how we can supercharge progress for you, visit www.hcltech.com Job Title: Zero Trust Network Access Engineer Location: London, UK Hybrid mode - 3 days work from office This is Fixed term contract role FTC/FTE Requirements / Qualifications / Tasks Responsibilities/Tasks:

• Develop and create the Banks Global Zero Trust Network Access Solution for over 100K users.

• Identify automation and telemetry enhancement opportunities and drive required changes and product developments.

• Stay current on the company's engineering approaches, security requirements, and best practices and apply them in a timely manner.

• Problem-management / L3 Support / vendor service relationship.

• Creating and maintaining structured documentation for all platforms in scope including technical designs, release notes, test cases, and vendor improvements.

• The engagement with other technology and security teams to ensure the platform is fit for purpose, cost effective and adheres to the engineering standards and mobile policies.

• Design Zero Trust Network Access concept. Ensuring adherence to the SDLC process and other company demanded engineering and release management practices. Required Skills:

• Excellent in-depth technical experience in the delivery of VPN/Remote Access and cyber-security solutions which are fit for purpose in a large, regulated enterprise environment.

• Very good and in depth understanding of networking concepts and protocols including IP, routing, TLS, ActiveSync, SSL VPN, ESP, IKEv2, ICA, RDP.

• Infrastructure design experience including availability and resilience approaches, data center setups, virtualization, networks.

• Excellent product experience on Palo Alto Network Prisma Access and ZTNA

• Basic understanding of Citrix, Azure (MFA)

• SAML Based-Authentication.

• Experience to interact Application Programming Interfaces with e.g. Postman, Bruno.

• Azure Active Directory / Conditional Access / DNS / DHCP / PKI certificate infrastructure.

• Proven track record in problem solving, within a medium to large enterprise environment.

• A solid understanding of Agile concepts and best practices.

• Tools knowledge of advantage: JIRA, Confluence, Splunk, Fiddler, Wireshark and Service Now.

• Windows/MacOS/iOS/Android skills are an advantage. Education/Certification:

• Educated to bachelor's degree level or above (or overseas equivalent)

• Agile or ITIL certification preferred.

• Relevant network and/or security certifications preferred Candidate will be:

• Hands-on person, great in communicating and documentation, super strong network engineering and agile driven mindset.

• Logical, innovative, articulate, and able to work directly with technical and non-technical stakeholders.

• Organized and driven to continuously improve the platform and deliver an improved user experience.

• Diligent, methodical and able to constructively critique and improve designs and methods.

• Can work in virtual teams spanning multiple time zones.

• Keeps up to date on recent IT security incidents and threats.