Sr. Engineer – Security Engineering (Zscaler)

National Spinning Co., Inc. (USA); Chennai District; On-site; INR 1,200,000 - 1,800,000; Full time

Job summary

CBTS is seeking a Zscaler & Network Security Engineer to administer secure internet access, endpoint connectivity, and remote access while maintaining a strong security posture. You will collaborate with security operations, network teams, and stakeholders to ensure reliable user connectivity.

The role requires hands-on experience with ZIA, ZCC, VPNs, and vulnerability management, plus strong documentation and change-control practices. A proactive security mindset is essential.

Qualifications

• Hands-on experience administering Zscaler ZIA and ZCC.
• Strong understanding of web security concepts including SSL inspection, URL filtering, and CASB.
• Experience with VPN technologies, preferably Palo Alto GlobalProtect.
• Familiarity with security incident management and SLA-driven operations.
• Understanding of Change Management and Change Control processes.
• Experience using Qualys or similar vulnerability/asset-management platforms.
• Strong documentation skills including SOPs and runbooks.

Responsibilities

• Administer and maintain Zscaler Internet Access (ZIA) policies including SSL inspection, URL filtering, and application control.
• Manage ZCC deployments, including installation, connectivity, authentication, and policy enforcement.
• Manage PAC file changes through controlled deployment processes.
• Monitor security alerts and dashboards, investigate issues, and resolve incidents within SLAs.
• Apply least-privilege access across user populations and elevate exceptions when needed.
• Support security audits by providing control evidence and documentation.
• Develop and maintain SOPs and knowledge bases.

Skills

Zscaler ZIA

Zscaler Client Connector (ZCC)

Web security concepts

VPN technologies

Change management

Vulnerability/asset management

Least privilege / access governance

Documentation & SOPs

Tools

Qualys

GlobalProtect

Job description

CBTS serves enterprise and midmarket clients in all industries across the United States and Canada. CBTS combines deep technical expertise with a full suite of flexible technology solutions--including Application Modernization, Managed Hybrid Cloud, Cybersecurity, Unified Communications, and Infrastructure solutions. From developing and deploying modern applications and the secure, scalable platforms on which they run, to managing, monitoring, and optimizing their operations, CBTS delivers comprehensive technology solutions for its clients' transformative business initiatives. For more information, please visit www.cbts.com .

OnX is a leading technology solution provider that serves businesses, healthcare organizations, and government agencies across Canada. OnX combines deep technical expertise with a full suite of flexible technology solutions—including Generative AI, Application Modernization, Managed Hybrid Cloud, Cybersecurity, Unified Communications, and Infrastructure solutions. From developing and deploying modern applications and the secure, scalable platforms on which they run, to managing, monitoring, and optimizing their operations, OnX delivers comprehensive technology solutions for its clients’ transformative business initiatives. For more information, please visit www.onx.com .

Role Overview

We are seeking aZscaler & Network Security Engineerresponsible for administering, monitoring, troubleshooting, and continuously improving secure internet access, endpoint connectivity, remote access, and security controls. The role will work closely with security operations, network teams, and senior security stakeholders to maintain a strong security posture while ensuring reliable user connectivity.

Key Responsibilities

• Administer and maintainZscaler Internet Access (ZIA)policies, including:
• SSL inspection
• Application control
• URL filtering
• CASB controls
• Malware exceptions, blocks, and security policies
• Manage and troubleshootZscaler Client Connector (ZCC)deployments, including installation, connectivity, authentication, policy enforcement, and endpoint-related issues.
• ManagePAC filechanges through a controlled, tested, peer-reviewed, and approved deployment process.
• Monitor security alerts and operational dashboards, investigate issues, and resolve day-to-daysecurity incidents within defined SLAs.
• Raise, document, implement, and drive changes through formalChange Controlprocesses, particularly where changes deviate from the approved security baseline.
• Manage and troubleshootVPN/remote-access solutions, such as Palo Alto GlobalProtect, addressing connectivity, authentication, performance, and user-access issues.
• Useasset inventory and vulnerability-management tools, such as Qualys or similar platforms, to support troubleshooting, asset identification, security investigations, and vulnerability-management activities.
• Review and assesspolicy, URL, application, and whitelisting requests, escalating higher-risk requests to senior security stakeholders for appropriate risk assessment and approval.
• Applyleast-privilege access principlesacross different user populations, including employees, contractors, privileged users, and executives.
• Supportsecurity audits and compliance reviewsby collecting, validating, and providing appropriate control evidence and supporting documentation.
• Develop and maintainStandard Operating Procedures (SOPs), troubleshooting guides, and knowledge base articlesto improve operational consistency and knowledge sharing.

Required Skills & Experience

• Hands-on experience administeringZscaler ZIA and Zscaler Client Connector.
• Strong understanding of web security concepts, includingSSL inspection, URL filtering, application control, CASB, sandboxing, and malware protection.
• Experience troubleshootingZCC, PAC files, proxy connectivity, and endpoint access issues.
• Experience withVPN technologies, preferably Palo Alto GlobalProtect.
• Familiarity withsecurity incident management, alert monitoring, and SLA-driven operations.
• Understanding ofChange Management and Change Controlprocesses.
• Experience usingQualys or similar vulnerability/asset-management platforms.
• Strong understanding ofleast privilege, secure baselines, access control, and security governance.
• Ability to assess security risks and appropriately elevate exceptions or higher-risk requests.
• Strong documentation skills, including writingSOPs, runbooks, and knowledge articles.

Preferred Skills

• Experience working in an enterpriseSecurity Operations or Network Securityenvironment.
• Palo Alto Networks security technology experience.
• Familiarity with vulnerability-management and security-compliance frameworks.
• Experience supporting internal and externalsecurity audits.
• Relevant certifications such asZscaler, Palo Alto Networks, Security+, or equivalent.
• Strong analytical and troubleshooting skills
• Security-focused mindset
• Attention to detail and risk awareness
• Effective incident and change management
• Clear written and verbal communication
• Ability to work within defined SLAs and operational processes
• Strong stakeholder management and escalation skills
• Strong stakeholder management and escalation skills Role Overview

We are seeking aZscaler & Network Security Engineerresponsible for administering, monitoring, troubleshooting, and continuously improving secure internet access, endpoint connectivity, remote access, and security controls. The role will work closely with security operations, network teams, and senior security stakeholders to maintain a strong security posture while ensuring reliable user connectivity.

Key Responsibilities

• Administer and maintainZscaler Internet Access (ZIA)policies, including:
• SSL inspection
• Application control
• URL filtering
• CASB controls
• Malware exceptions, blocks, and security policies
• Manage and troubleshootZscaler Client Connector (ZCC)deployments, including installation, connectivity, authentication, policy enforcement, and endpoint-related issues.
• ManagePAC filechanges through a controlled, tested, peer-reviewed, and approved deployment process.
• Monitor security alerts and operational dashboards, investigate issues, and resolve day-to-daysecurity incidents within defined SLAs.
• Raise, document, implement, and drive changes through formalChange Controlprocesses, particularly where changes deviate from the approved security baseline.
• Manage and troubleshootVPN/remote-access solutions, such as Palo Alto GlobalProtect, addressing connectivity, authentication, performance, and user-access issues.
• Useasset inventory and vulnerability-management tools, such as Qualys or similar platforms, to support troubleshooting, asset identification, security investigations, and vulnerability-management activities.
• Review and assesspolicy, URL, application, and whitelisting requests, escalating higher-risk requests to senior security stakeholders for appropriate risk assessment and approval.
• Applyleast-privilege access principlesacross different user populations, including employees, contractors, privileged users, and executives.
• Supportsecurity audits and compliance reviewsby collecting, validating, and providing appropriate control evidence and supporting documentation.
• Develop and maintainStandard Operating Procedures (SOPs), troubleshooting guides, and knowledge base articlesto improve operational consistency and knowledge sharing.

Required Skills & Experience

• Hands-on experience administeringZscaler ZIA and Zscaler Client Connector.
• Strong understanding of web security concepts, includingSSL inspection, URL filtering, application control, CASB, sandboxing, and malware protection.
• Experience troubleshootingZCC, PAC files, proxy connectivity, and endpoint access issues.
• Experience withVPN technologies, preferably Palo Alto GlobalProtect.
• Familiarity withsecurity incident management, alert monitoring, and SLA-driven operations.
• Understanding ofChange Management and Change Controlprocesses.
• Experience usingQualys or similar vulnerability/asset-management platforms.
• Strong understanding ofleast privilege, secure baselines, access control, and security governance.
• Ability to assess security risks and appropriately elevate exceptions or higher-risk requests.
• Strong documentation skills, including writingSOPs, runbooks, and knowledge articles.

Preferred Skills

• Experience working in an enterpriseSecurity Operations or Network Securityenvironment.
• Palo Alto Networks security technology experience.
• Familiarity with vulnerability-management and security-compliance frameworks.
• Experience supporting internal and externalsecurity audits.
• Relevant certifications such asZscaler, Palo Alto Networks, Security+, or equivalent.
• Strong analytical and troubleshooting skills
• Security-focused mindset
• Attention to detail and risk awareness
• Effective incident and change management
• Clear written and verbal communication
• Ability to work within defined SLAs and operational processes
• Strong stakeholder management and escalation skills