Hands-on experience with Zscaler Zero Trust Branch (ZTB) and SD-WAN. Design and implement secure branch connectivity to DC, cloud, internet, SaaS, and private applications. Strong knowledge of routing, VLANs, subnets, segmentation, NAT, and traffic steering. Configure SD-WAN traffic optimization and local internet breakout. Implement IP-based security policies and centralized policy management. Perform ZTB appliance onboarding, configuration, integration, and troubleshooting. Conduct connectivity, routing, segmentation, policy, and resiliency testing. Prepare as-built documentation and provide knowledge transfer to BAU/support teams. Valuable understanding of Zero Trust architecture and enterprise network security. Experience with ZIA/ZPA, cloud networking, and enterprise security solutions is an advantage.