CATO Networks ZTNA Engineer

Work Location - Bangalore/Mumbai Shift - 24/7 Role Overview We are seeking a skilled Cato Networks ZTNA Engineer to design, implement, and manage secure remote access solutions using the Cato SASE Cloud Platform. The role focuses on enabling Zero Trust Network Access, replacing traditional VPN architectures, and ensuring secure, optimized connectivity for users and applications. Key Responsibilities 1. ZTNA Implementation & Management Deploy and configure Cato ZTNA solutions for secure remote and branch access •Replace legacy VPN solutions with Zero Trust architecture •Configure identity-based access policies for users, devices, and applications •Implement client-based and clientless ZTNA access 2. Cato SASE Platform Administration Manage Cato Management Application (CMA) •Configure and maintain: oSD-WAN policies oSecurity policies (FWaaS, IPS, CASB, SWG) oTraffic steering and network segmentation •Monitor network performance across global PoPs 3. Security & Access Control Integrate with Identity Providers (IdP) such as: oAzure AD / Entra ID oOkta oADFS •Implement multi-factor authentication (MFA) •Enforce least privilege access policies 4. Troubleshooting & Support Diagnose issues related to: oUser access failures oTunnel connectivity oApplication access via ZTNA •Perform packet analysis and traffic inspection •Provide L2/L3 support for production issues 5. Network & Connectivity Configure and manage: oIPsec tunnels oCato Socket deployments (physical/virtual) oRemote user clients (Windows, macOS, mobile) •Optimize application performance using WAN optimization 6. Monitoring & Reporting Use Cato dashboards for: oTraffic analysis oSecurity events oUser activity monitoring •Generate regular reports for compliance and management 7. Documentation & Compliance Create and maintain: oNetwork diagrams oStandard operating procedures (SOPs) oConfiguration documents •Support audits and compliance requirements Technical Skills Strong experience with: oCato Networks SASE platform (mandatory/preferred) oZero Trust Network Access (ZTNA) concepts oSD-WAN technologies Knowledge of networking fundamentals: oTCP/IP, DNS, DHCP oRouting protocols (BGP, OSPF) Experience with: oFirewalls (Palo Alto, Fortinet, Cisco) oVPN technologies (IPsec, SSL VPN) •Familiarity with cloud environments (Azure, AWS, GCP) Security Skills Understanding of: oZero Trust Architecture (ZTA) oIdentity & Access Management (IAM) oSecure Web Gateway (SWG) oCASB and DLP concepts Tools & Technologies •Cato Management Application •Wireshark / packet capture tools •SIEM tools (Splunk, Sentinel nice to have) •Endpoint security integrations