Network Security Engineer

Synapse Business Systems Inc.; Gurugram District; Hybrid; INR 1,200,000 - 2,000,000; Full time

Job summary

Universal Technology Solutions (India) is seeking a Network Security Engineer for Zscaler Internet Access and Secure Web Gateway. The role involves supporting a U.S. banking client from Gurgaon with hybrid (predominantly onsite) work.

You will configure ZIA policies, troubleshoot client connectors and SSL issues, and coordinate with global security teams. Strong ZIA, SIEM, and firewall skills are required.

Qualifications

• 2+ years hands-on Zscaler ZIA administration and troubleshooting.
• Experience configuring ZIA policies, SSL inspection, and traffic forwarding.
• Experience integrating Zscaler logs with Splunk or SIEM.
• Hands-on firewall experience with next-gen firewalls.
• Strong TCP/IP, DNS, NAT, VPN/IPsec, TLS knowledge.

Responsibilities

• Configure and manage Zscaler ZIA policies, URL filtering, and SSL/TLS inspection.
• Troubleshoot Zscaler Client Connector, PAC files, GRE/IPsec tunnels, DNS, and network connectivity.
• Investigate authentication failures, SSL certificate issues, and application access problems.
• Integrate Zscaler logs with Splunk or other SIEM tools.
• Manage firewalls, VPNs, traffic forwarding, and security incidents.
• Handle incident management, RCA, changes, and technical documentation.
• Coordinate with US stakeholders and security teams.

Skills

ZIA administration

SIEM (Splunk)

Firewall experience

Networking basics

PAC files & GRE tunnels

ITIL processes

Communication with US stakeholders

Security policy tuning

Education

BE/BTech/MCA or equivalent

Tools

Splunk

Palo Alto

Fortinet

Job description

Job role : Network Security Engineer Zscaler Internet Access / Secure Web Gateway

Client/Company : Universal Technology solution uebiz

Universal Technology Solutions - Customized Your Way

Network Security Engineer — Zscaler Internet Access / Secure Web Gateway

India-based role supporting a large U.S. banking client through UTS, a vendor-independent systems integrator operating across eight countries.

Employer

Universal Technology Solutions (India)

Type

Full-time, permanent

Location

Gurgaon, Haryana — hybrid, predominantly onsite at the UTS Gurgaon office

Experience

4–8 years total; 2+ years hands-on Zscaler

Shift

2:00 PM – 11:00 PM IST

Key Responsibilities

• Configure and manage Zscaler ZIA policies, URL filtering, and SSL/TLS inspection.
• Troubleshoot Zscaler Client Connector, PAC files, GRE/IPsec tunnels, DNS, and network connectivity.
• Investigate application access issues, authentication failures, and SSL certificate problems.
• Integrate Zscaler logs with Splunk or other SIEM tools.
• Manage firewalls, VPNs, traffic forwarding, and network security incidents.
• Handle incident management, RCA, change implementation, and technical documentation.
• Coordinate with U.S. stakeholders and security/network teams.

Mandatory Skills

• 2+ years of hands-on Zscaler ZIA administration and troubleshooting.
• Strong knowledge of ZIA policies, SSL inspection, and traffic forwarding.
• Splunk or other SIEM/log management experience.
• Hands-on firewall experience: Palo Alto, Fortinet, or equivalent.
• Strong networking fundamentals: TCP/IP, DNS, NAT, VPN/IPsec, routing, and TLS.
• Knowledge of PAC files, GRE tunnels, and certificate management.
• ITIL-based incident and change management.
• B.E./B.Tech/MCA or equivalent qualification, as accepted by the employer.
• Good communication skills for working with U.S. stakeholders.

Good to Have

• ZPA, ZDX, Entra ID/Active Directory, SAML/SCIM.
• Python/PowerShell scripting and Zscaler API knowledge.
• Cloud security, DLP, CASB, and proxy migration experience.
• Banking/BFSI experience and Zscaler certifications.

Screening questions for the first round

• Walk me through what happens, step by step, from a laptop opening a browser to the page rendering, with Client Connector installed and SSL inspection enabled.
• An application breaks only for users behind zIA. How do you isolate whether it is inspection, policy, DNS, or the application itself?
• What is your process for granting an SSL inspection bypass, and who approves it?
• When would you choose a GRE tunnel over IPSec, or a PAC file over Client Connector?
• Describe the largest ZIA environment you have worked in — seat count, number of locations, and what you personally owned versus what the team owned.
• Have you migrated off a legacy proxy? What surprised you?
• Describe a change you made that caused an incident. What did you change in your process afterwards?
• Splunk and Log Integration: Explain how you have integrated Zscaler logs with Splunk. Have you configured NSS or Log Streaming Service, and how do you troubleshoot missing logs or ingestion failures?
• Firewall Experience: What hands-on experience do you have with Palo Alto or other next-generation firewalls? Explain how you troubleshoot firewall rules, NAT, routing, and IPsec connectivity.
• End-to-End Security Ownership: Describe a security issue you independently resolved involving Zscaler, firewalls, network traffic, and log analysis..