Security Engineer (Zscaler L3 | ZIA | ZPA | ZDX | Zero Trust)

Sky Systems, Inc. (SkySys); India; Remote; INR 1,200,000 - 2,000,000; Full time

Job summary

A leading technology company is seeking a hands-on Zscaler L3 Engineer to act as the highest escalation point for Zscaler operations across a large enterprise environment. This remote role focuses on advanced troubleshooting, optimization, and Zero Trust security alignment. Ideal candidates will have 6–8 years in IT roles and over 4 years of Zscaler administration experience. Strong expertise in ZIA, ZPA, and ZDX is essential. Preferred certifications include Zscaler EDU-301 & EDU-302.

Qualifications

• 6–8 years in IT / Network / Security roles.
• 4+ years hands-on Zscaler administration (enterprise or MSSP).
• Strong expertise in ZIA, ZPA, ZDX.
• Solid understanding of TCP/IP, DNS, HTTP/S, SSL/TLS.
• Experience with certificate management & PKI.
• Ability to work independently in high-pressure environments.

Responsibilities

• Act as L3 escalation for complex issues across ZIA, ZPA, and ZDX.
• Perform root cause analysis (RCA) using logs, PCAPs, and debugging.
• Manage and optimize ZIA policies (SWG, FWaaS, SSL Inspection, DLP, CASB).
• Configure and maintain ZPA components (App Connectors, App Segments, PSE).
• Support identity integrations (SAML, SCIM, Okta, Azure AD, Ping).
• Handle certificates, PKI, and SSL inspection.
• Integrate Zscaler with SIEM/SOAR tools (Splunk, Sentinel, QRadar).
• Use Zscaler APIs for automation and reporting.
• Produce RCA documentation and support continuous improvement.

Skills

Zscaler administration

TCP/IP

DNS

HTTP/S

SSL/TLS

SAML

SCIM

Okta

Azure AD

Ping

Tools

Zscaler APIs

Splunk

Sentinel

QRadar

Job description

Position Type: Full-Time Contract (40hrs/week)

Contract Duration: long term

Work Hours: EST

Work Schedule: 8 hours/day (Mon-Fri)

Location: 100% Remote

We’re looking for a hands‑on Zscaler L3 Engineer to act as the highest escalation point for Zscaler operations across a large enterprise environment. This role focuses on advanced troubleshooting, optimization, and Zero Trust security alignment.

Key Responsibilities:

• Act as L3 escalation for complex issues across ZIA, ZPA, and ZDX
• Perform root cause analysis (RCA) using logs, PCAPs, and debugging
• Manage and optimize ZIA policies (SWG, FWaaS, SSL Inspection, DLP, CASB)
• Configure and maintain ZPA components (App Connectors, App Segments, PSE)
• Support identity integrations (SAML, SCIM, Okta, Azure AD, Ping)
• Handle certificates, PKI, and SSL inspection
• Integrate Zscaler with SIEM/SOAR tools (Splunk, Sentinel, QRadar)
• Use Zscaler APIs for automation and reporting
• Produce RCA documentation and support continuous improvement

Requirements:

• 6–8 years in IT / Network / Security roles
• 4+ years hands‑on Zscaler administration (enterprise or MSSP)
• Strong expertise in ZIA, ZPA, ZDX
• Solid understanding of TCP/IP, DNS, HTTP/S, SSL/TLS
• Experience with certificate management & PKI
• Experience with endpoint/ZCC deployment (Intune/MDM)
• Ability to work independently in high‑pressure environments

Certifications (Preferred / Must-Have):

• Zscaler EDU-301 & EDU-302 (Must Have)
• Zscaler Certified Cloud Professional (Edu-200 / EDU-202)