Zero Trust Network Access (ZTNA) Mobile Engineer

Zero Trust Network Access (ZTNA) Mobile Engineer

Location: London
Department: Infrastructure/GTI/End User Computing
Reports To: ZTNA Programme

2. About CACI Network Services

CACI Network Services is a leading provider of secure networking, cloud, and digital transformation solutions. We support mission-critical environments by delivering innovative, secure, and scalable technology services that enable our clients to operate effectively and securely in an evolving digital landscape.

3 Role Overview

The End User Computing (EUC) team is responsible for delivering secure remote access solutions across corporate and BYOD devices. Working within a fast-paced Agile environment, the team develops and maintains modern access technologies that enable users to connect securely from anywhere.

As a Zero Trust Network Access (ZTNA) Mobile Engineer, you will play a key role in the engineering, development, and enhancement of the ZTNA infrastructure supporting iOS, Android, Windows, and macOS devices. You will work closely with Product Management, Operations, and Security teams to deliver secure, scalable, and user-focused solutions while driving automation and continuous improvement.

4. Key Responsibilities

• Configure, build, and deploy platform solutions using automated processes and infrastructure-as-code principles.
• Take ownership of the platform from an end-to-end engineering perspective.
• Ensure solutions align with security, compliance, data protection, and governance requirements.
• Collaborate closely with Product and Operations teams to ensure smooth transition of services from engineering into production.
• Participate in backlog refinement, sprint planning, and Agile delivery activities.
• Drive continuous improvement initiatives across the platform and engineering processes.
• Package, deploy, and manage applications through Microsoft Intune, including:
  • Palo Alto Prisma Access Agent
  • Palo Alto Enterprise Browser
• Support release management and ensure adherence to SDLC processes and engineering best practices.
• Contribute to platform innovation while maintaining a strong focus on user experience and security.

5. Required Skills & Experience

Endpoint Management & Mobility

• Strong knowledge of iOS and Android operating systems, architecture, and enterprise management.
• Extensive experience with Microsoft Intune (Endpoint Manager) including:
  • Device provisioning
  • Configuration profiles
  • Compliance policies
  • Conditional Access
  • Windows Autopilot
  • Application deployment

Identity & Access Management

• Strong understanding of Microsoft Entra ID (Azure Active Directory) including:
  • Conditional Access
  • Identity Protection
  • Multi-Factor Authentication (MFA)
  • Integration with Intune and Microsoft 365

Automation & Engineering

• Experience with Scripting and automation using PowerShell, preferably Azure PowerShell.
• Knowledge of automation frameworks, settings customisation, and application configuration.
• Understanding of software development life cycle (SDLC) processes and Agile methodologies.

Infrastructure & Security

• Good understanding of Microsoft Active Directory architecture and Group Policy migration to modern device management (MDM).
• Solid knowledge of end-to-end IT service delivery including architecture, design, implementation, and operational support.
• Experience supporting Zero Trust and secure remote access technologies is highly desirable.

6. Desirable Skills

• Experience with Palo Alto Prisma Access.
• Experience with Palo Alto Enterprise Browser.
• Knowledge of Zero Trust security principles and frameworks.
• Experience working within large-scale enterprise environments.
• Exposure to DevOps and automation-led delivery models.

7. Qualifications

• Bachelor's degree or equivalent industry experience.
• Agile certification (Scrum, SAFe, Agile Practitioner) desirable.
• ITIL Foundation certification desirable.
• Relevant networking and security certifications are advantageous, such as:
  • Palo Alto Networks Certifications
  • Microsoft Certifications
  • CompTIA Security+
  • CISSP
  • CCNP Security

8. Personal Attributes

The successful candidate will:

• Be a hands-on engineer with excellent communication and documentation skills.
• Demonstrate a strong networking and security engineering mindset.
• Be logical, analytical, and innovative in problem-solving.
• Confidently engage with both technical and non-technical stakeholders.
• Be highly organised and committed to continuous improvement.
• Take a methodical approach to engineering, design review, and delivery.
• Thrive in globally distributed teams spanning multiple time zones.
• Maintain awareness of emerging cyber security threats and industry best practices.

Expected behaviours

We have a structured performance management framework which measures continual attainment against key personal behaviours. We believe this is an important part of our success and culture. Joining as a team member we expect you to act as a role model and exemplar against these behaviours which are to be:

• Proactive
• Adaptable
• Flexible
• A team player
• Reliable

Flexibility

The key to our success is our teamwork and collaboration. We take a hybrid approach - working remotely and coming into the office depending on the business demand and collaboration required as part of the delivery process.

Equal opportunities

CACI is proud to be an equal employer. Embracing the diversity of our people, we are on a journey to build a truly inclusive work environment where no one is treated less favorably due to ethnic origin, age, gender, veteran status, religion or belief, sexual orientation, marital status, and disability or health condition, actively working to prevent discrimination.