Zscaler Expert – Technical Architect

Job Description:

Zscaler Expertise:

• Fifteen years of comprehensive experience in the IT field managing large-scale network security infrastructure

Primary Skills:

• ZIA (Zscaler Internet Access):

• Internet Security: Deep understanding of secure web gateway (SWG), SSL/TLS inspection, malware protection, content filtering, and DLP.

• URL Filtering and Threat Detection: Knowledge of configuring and managing URL filtering, sandboxing, and advanced threat protection within ZIA.

• Firewall and Policy Management: Ability to configure policies for internet access, data protection, and application control.

• Troubleshooting: Skills in diagnosing and resolving issues related to traffic forwarding, latency, and user access in a cloud-based SWG environment.

• ZPA (Zscaler Private Access):

• Zero Trust Architecture: Expertise in implementing ZPA’s zero trust network access (ZTNA) model.

• Application Segmentation: Knowledge of configuring policies to provide secure access to internal apps without exposing them to the internet.

• Authentication and Identity: Proficiency with multi-factor authentication (MFA), Single Sign-On (SSO), and integration with identity providers (IDPs).

• Client Connector Management: Experience in managing and troubleshooting Zscaler Client Connector (ZCC) agents.

2. Networking Knowledge

• Network Protocols: Strong understanding of TCP/IP, DNS, HTTP/S, IPsec, VPNs, and network routing.

• Security Protocols: Familiarity with TLS/SSL, IPsec, and GRE tunnels for secure data transfer.

Secondary Skills: 

1. Automation Skills 

• Scripting and Automation: Basic to intermediate skills in scripting languages like Python, PowerShell, or Bash for automating repetitive tasks, reporting, and monitoring.

• APIs: Experience with Zscaler’ s API for integrating ZIA/ZPA with third-party tools and automating administrative tasks such as policy changes, configuration management, and user provisioning.

• Automation Tools: Familiarity with tools like Ansible, Terraform, or scripting via Zscaler’ s API to automate configuration, deployment, or compliance tasks.

2. Cloud Security Best Practices

• CASB: Knowledge of cloud access security broker (CASB) functionalities, including visibility, governance, and protection across SaaS apps.

• Cloud Networking: Experience with cloud platforms and security configurations, including how Zscaler integrates with IaaS and PaaS services.

 Soft Skills:

• Problem Solving and Troubleshooting: Analytical skills to resolve complex issues with minimal supervision.

• Documentation and Reporting: Ability to document configurations, procedures, and troubleshooting steps effectively.

• Collaboration: Teamwork and communication skills to collaborate with security teams, developers, and IT personnel.

• Training & Mentoring: Ability to lead teams, mentor junior engineers, and deliver training on firewall technologies.