Zero Trust Network Access (ZTNA) Mobile Engineer in London

Zero Trust Network Access (ZTNA) Mobile Engineer
Location: LondonDepartment: Infrastructure/GTI/End User ComputingReports To: ZTNA Programme
About CACI Network Services
CACI Network Services is a leading provider of secure networking, cloud, and digital transformation solutions. We support mission-critical environments by delivering innovative, secure, and scalable technology services that enable our clients to operate effectively and securely in an evolving digital landscape.
Role Overview
The End User Computing (EUC) team is responsible for delivering secure remote access solutions across corporate and BYOD devices. Working within a fast-paced Agile environment, the team develops and maintains modern access technologies that enable users to connect securely from anywhere.
As a Zero Trust Network Access (ZTNA) Mobile Engineer, you will play a key role in the engineering, development, and enhancement of the ZTNA infrastructure supporting iOS, Android, Windows, and macOS devices. You will work closely with Product Management, Operations, and Security teams to deliver secure, scalable, and user-focused solutions while driving automation and continuous improvement.
Key Responsibilities
Configure, build, and deploy platform solutions using automated processes and infrastructure-as-code principles.
Take ownership of the platform from an end-to-end engineering perspective.
Ensure solutions align with security, compliance, data protection, and governance requirements.
Collaborate closely with Product and Operations teams to ensure smooth transition of services from engineering into production.
Participate in backlog refinement, sprint planning, and Agile delivery activities.
Drive continuous improvement initiatives across the platform and engineering processes.
Package, deploy, and manage applications through Microsoft Intune, including:
Palo Alto Prisma Access Agent
Palo Alto Enterprise Browser
Support release management and ensure adherence to SDLC processes and engineering best practices.
Contribute to platform innovation while maintaining a strong focus on user experience and security.
Required Skills & Experience
Endpoint Management & Mobility
Strong knowledge of iOS and Android operating systems, architecture, and enterprise management.
Extensive experience with Microsoft Intune (Endpoint Manager) including:
Device provisioning
Configuration profiles
Compliance policies
Conditional Access
Windows Autopilot
Application deployment
Identity & Access Management
Strong understanding of Microsoft Entra ID (Azure Active Directory) including:
Conditional Access
Identity Protection
Multi-Factor Authentication (MFA)
Integration with Intune and Microsoft 365
Automation & Engineering
Experience with Scripting and automation using PowerShell, preferably Azure PowerShell.
Knowledge of automation frameworks, settings customisation, and application configuration.
Understanding of software development life cycle (SDLC) processes and Agile methodologies.
Infrastructure & Security
Good understanding of Microsoft Active Directory architecture and Group Policy migration to modern device management (MDM).
Solid knowledge of end-to-end IT service delivery including architecture, design, implementation, and operational support.
Experience supporting Zero Trust and secure remote access technologies is highly desirable.
Desirable Skills
Experience with Palo Alto Prisma Access.
Experience with Palo Alto Enterprise Browser.
Knowledge of Zero Trust security principles and frameworks.
Experience working within large-scale enterprise environments.
Exposure to DevOps and automation-led delivery models.
Qualifications
Bachelor's degree or equivalent industry experience.
Agile certification (Scrum, SAFe, Agile Practitioner) desirable.
ITIL Foundation certification desirable.
Relevant networking and security certifications are advantageous, such as:
Palo Alto Networks Certifications
Microsoft Certifications
CompTIA Security+
CISSP
CCNP Security
Personal Attributes
The successful candidate will:
Be a hands-on engineer with excellent communication and documentation skills.
Demonstrate a strong networking and security engineering mindset.
Be logical, analytical, and innovative in problem-solving.
Confidently engage with both technical and non-technical stakeholders.
Be highly organised and committed to continuous improvement.
Take a methodical approach to engineering, design review, and delivery.
Thrive in globally distributed teams spanning multiple time zones.
Maintain awareness of emerging cyber security threats and industry best practices.
Expected behaviours
We have a structured performance management framework which measures continual attainment against key personal behaviours. We believe this is an important part of our success and culture. Joining as a team member we expect you to act as a role model and exemplar against these behaviours which are to be:
Proactive
Adaptable
Flexible
A team player
Reliable
Flexibility
The key to our success is our teamwork and collaboration. We take a hybrid approach - working remotely and coming into the office depending on the business demand and collaboration required as part of the delivery process.
Equal opportunities
CACI is proud to be an equal employer. Embracing the diversity of our people, we are on a journey to build a truly inclusive work environment where no one is treated less favorably due to ethnic origin, age, gender, veteran status, religion or belief, sexual orientation, marital status, and disability or health condition, actively working to prevent discrimination.