Job role : Network Security Engineer Zscaler Internet Access / Secure Web Gateway

Client/Company : Universal Technology solution uebiz Universal Technology Solutions - Customized Your Way

Network Security Engineer — Zscaler Internet Access / Secure Web Gateway

India-based role supporting a large U.S. banking client through UTS, a vendor-independent systems integrator operating across eight countries.

Employer

Universal Technology Solutions (India)

Type

Full-time, permanent

Location

Gurgaon, Haryana — hybrid, predominantly onsite at the UTS Gurgaon office

Experience

4–8 years total; 2+ years hands-on Zscaler

Shift

2:00 PM – 11:00 PM IST

Key Responsibilities

- Configure and manage Zscaler ZIA policies, URL filtering, and SSL/TLS inspection.
- Troubleshoot Zscaler Client Connector, PAC files, GRE/IPsec tunnels, DNS, and network connectivity.
- Investigate application access issues, authentication failures, and SSL certificate problems.
- Integrate Zscaler logs with Splunk or other SIEM tools.
- Manage firewalls, VPNs, traffic forwarding, and network security incidents.
- Handle incident management, RCA, change implementation, and technical documentation.
- Coordinate with U.S. stakeholders and security/network teams.

Mandatory Skills

- 2+ years of hands-on Zscaler ZIA administration and troubleshooting.
- Strong knowledge of ZIA policies, SSL inspection, and traffic forwarding.
- Splunk or other SIEM/log management experience.
- Hands-on firewall experience: Palo Alto, Fortinet, or equivalent.
- Strong networking fundamentals: TCP/IP, DNS, NAT, VPN/IPsec, routing, and TLS.
- Knowledge of PAC files, GRE tunnels, and certificate management.
- ITIL-based incident and change management.




- B.E./B.Tech/MCA or equivalent qualification, as accepted by the employer.
- Valuable communication skills for working with U.S. stakeholders.

Good to Have

- ZPA, ZDX, Entra ID/Active Directory, SAML/SCIM.
- Python/PowerShell scripting and Zscaler API knowledge.
- Cloud security, DLP, CASB, and proxy migration experience.
- Banking/BFSI experience and Zscaler certifications.

Screening questions for the first round

- Walk me through what happens, step by step, from a laptop opening a browser to the page rendering, with Client Connector installed and SSL inspection enabled.
- An application breaks only for users behind ZIA. How do you isolate whether it is inspection, policy, DNS, or the application itself?
- What is your process for granting an SSL inspection bypass, and who approves it?
- When would you choose a GRE tunnel over IPSec, or a PAC file over Client Connector?
- Describe the largest ZIA environment you have worked in — seat count, number of locations, and what you personally owned versus what the team owned.
- Have you migrated off a legacy proxy? What surprised you?
- Describe a change you made that caused an incident. What did you change in your process afterwards?
- Splunk and Log Integration: Explain how you have integrated Zscaler logs with Splunk. Have you configured NSS or Log Streaming Service, and how do you troubleshoot missing logs or ingestion failures?
- Firewall Experience: What hands-on experience do you have with Palo Alto or other next-generation firewalls? Explain how you troubleshoot firewall rules, NAT, routing, and IPsec connectivity.
- End-to-End Security Ownership: Describe a security issue you independently resolved involving Zscaler, firewalls, network traffic, and log analysis..

📌 Network Security Engineer (Gurugram)
🏢 synapse Business Systems
📍 Gurugram