Lead - Captive Operations

Tata Communications; Mumbai; On-site; INR 1,500,000 - 2,300,000; Full time

Job summary

Tata Communications is seeking an experienced Security Engineer with deep expertise in Zscaler ZIA/ZPA/ZCC and Enterprise DNS Security to implement, monitor, and optimize secure internet access and zero trust controls.

The role covers configuring, deploying, and maintaining Zscaler services, integrating with identity providers, and overseeing DNS security through Infoblox and DNS firewall technologies, while collaborating with SOC and cross-functional teams.

Responsibilities

• Administer and manage Zscaler Internet Access (ZIA).
• Configure and manage Zscaler Private Access (ZPA).
• Manage Zscaler Client Connector (ZCC) deployments and policies.
• Configure URL Filtering, SSL Inspection, Cloud Firewall, CASB, Sandbox, DLP, and Browser Isolation.
• Create and maintain security policies for users, groups, and applications.
• Troubleshoot user connectivity and application access issues.
• Integrate Zscaler with Active Directory, Azure AD/Entra ID, Okta, and MFA solutions.
• Monitor Zscaler dashboards and security logs.
• Perform policy tuning and optimize web security controls.
• Manage Enterprise DNS Security solutions such as Infoblox BloxOne Threat Defense, DNS Firewall.
• Configure DNS filtering and security policies.
• Detect and block malicious domains.
• Investigate DNS tunneling activities.
• Monitor DNS exfiltration attempts.
• Implement DNS sinkholing.
• Analyze DNS logs for threat detection.
• Manage DNS forwarding and recursive resolver security.
• Investigate web security incidents.
• Analyze malware and phishing URLs.
• Block Indicators of Compromise (IOCs).
• Perform threat hunting using Zscaler and DNS telemetry.
• Tune detection rules to reduce false positives.
• Support Incident Response activities.
• Coordinate with SOC, Network, Endpoint, and Cloud Security teams.

Tools

Zscaler

ZIA

ZPA

ZCC

DNS Firewall

Infoblox BloxOne Threat Defense

Active Directory

Azure AD/Entra ID

Okta

MFA solutions

Job description

We are looking for an experienced Security Engineer with expertise in Zscaler Internet Access (ZIA), Zscaler Private Access (ZPA), Zscaler Client Connector (ZCC), and Enterprise DNS Security solutions. The candidate will be responsible for implementing, administering, monitoring, troubleshooting, and optimizing secure internet access, Zero Trust Network Access (ZTNA), DNS security, and web security controls.

Key Responsibilities

Zscaler Administration

• Administer and manage Zscaler Internet Access (ZIA).
• Configure and manage Zscaler Private Access (ZPA).
• Manage Zscaler Client Connector (ZCC) deployments and policies.
• Configure URL Filtering, SSL Inspection, Cloud Firewall, CASB, Sandbox, DLP, and Browser Isolation.
• Create and maintain security policies for users, groups, and applications.
• Troubleshoot user connectivity and application access issues.
• Integrate Zscaler with Active Directory, Azure AD/Entra ID, Okta, and MFA solutions.
• Monitor Zscaler dashboards and security logs.
• Perform policy tuning and optimize web security controls.

DNS Security Administration

• Manage Enterprise DNS Security solutions such as:
• Infoblox BloxOne Threat Defense
• DNS Firewall
• Configure DNS filtering and security policies.
• Detect and block malicious domains.
• Investigate DNS tunneling activities.
• Monitor DNS exfiltration attempts.
• Implement DNS sinkholing.
• Analyze DNS logs for threat detection.
• Manage DNS forwarding and recursive resolver security.

Security Operations

• Investigate web security incidents.
• Analyze malware and phishing URLs.
• Block Indicators of Compromise (IOCs).
• Perform threat hunting using Zscaler and DNS telemetry.
• Tune detection rules to reduce false positives.
• Support Incident Response activities.
• Coordinate with SOC, Network, Endpoint, and Cloud Security teams.