Project Role : Security Architect
Project Role Description : Define the cloud security framework and architecture, ensuring it meets the business requirements and performance goals. Document the implementation of the cloud security controls and transition to cloud security-managed operations.
Must have skills : Zscaler Architecture
Good to have skills : NA
- Minimum
2 year(s) of experience is required
Educational Qualification : 15 years full time education
Summary:
- The L2 Engineer is responsible for the operational health of the Zscaler environment. This role focuses on Keep the Lights On (KTLO) activities, responding to user-reported issues, and executing standard changes within the ZIA and ZPA modules.
Roles Responsibilities:
- Incident Management: Provide 2nd level support for Zscaler connectivity issues. Troubleshoot authentication failures, PAC file logic errors, and application access denials.
- ZIA Administration: Manage URL filtering categories, Cloud Firewall rules, and SSL inspection policies. Ensure security headers and file type controls are aligned with corporate policy.
- ZPA Administration:
Provision new Application Segments and Server Groups. Monitor the health of App Connectors and ensure they are patched and operational.
- Traffic Steering: Manage GRE and IPSec tunnel health from branch offices to Zscaler Service Edges.
- Monitoring (ZDX): (Good to have) Use the ZDX dashboard to identify if a user s slow internet is caused by their local Wi-Fi, the ISP, or a specific Zscaler data center.
Qualified Technical Skills:
- Networking: Strong grasp of TCP/IP, DNS (Internal/External), and HTTP/HTTPS protocols.
- Proxy Knowledge: Understanding of PAC file syntax (JavaScript) and bypass logic.
- Identity: Basic experience with SAML/Azure AD or Okta for user provisioning.
- Tools: Experience with Wireshark for packet analysis and CLI tools (Ping, Traceroute, Dig).
- 24 years of experience in network security or technical support.
- Preferred: Zscaler Certified Cloud Associate - Internet Access (ZCCA-IA).