Z SCALER Technical Support

NTT America, Inc.; Dadri; On-site; INR 900,000 - 1,300,000; Full time

Job summary

NTT America, Inc. seeks an experienced Zscaler specialist to manage and support the ZIA and ZPA security infrastructure. You will act as escalation point for complex security, networking, and performance issues, performing root cause analysis to ensure timely resolution.

You will configure cloud security policies, manage PAC files, and integrate with IdP using SAML/SCIM, while collaborating with network, security, and DevOps teams to maintain Zero Trust posture.

Qualifications

• Minimum knowledge of Zscaler Internet Access (ZIA) and Zscaler Private Access (ZPA).
• Experience in incident and problem management with RCA.
• Experience configuring policies for ZIA and ZPA.
• Experience integrating with IdP using SAML/SCIM.
• Ability to collaborate with network, security, and DevOps teams.

Responsibilities

• Act as escalation point for Zscaler-related issues and perform root cause analysis.
• Manage and support ZIA and ZPA security infrastructure.
• Configure ZIA Traffic Control, App Control, and URL filtering policies.
• Integrate with IdP for user authentication and provisioning via SAML/SCIM.
• Deploy and configure Zscaler services following security policies.
• Optimize policies, ACLs, and traffic forwarding for ZIA/ZPA.
• Investigate SSL inspection bypass issues via traffic decryption.
• Handle DLP incidents and coordinate with HP cyber DLP team.

Skills

Zscaler

ZIA

ZPA

Root cause analysis

Incident management

SSL inspection

DLP

Log analysis

DevOps collaboration

PAC files

Tools

Zscaler Console

SAML/SCIM

PAC management tools

Job description

Job Requirements

Core responsibilities

Incident and problem management

Act as the escalation point for Zscaler-related issues, perform root cause analysis, and ensure timely resolution of complex security, networking, and performance problems

Infrastructure management

Manage and support the Zscaler security infrastructure, including Zscaler Internet Access (ZIA) and Zscaler Private Access (ZPA).

o ZPA Application Access: Manage application segments and segment groups to define and control user access to private internal applications.

Manage and update Proxy Auto-Configuration (PAC) files after seniors review, including all exceptions and redirection configurations.

Support On-Prem PSE Proxy servers.

• ZIA Traffic Control: Configure Cloud App Control and URL filtering policies to govern web and SaaS application access.

• Identity Integration: Integrate the Zscaler platform with an identity provider (IdP) for user authentication and automated provisioning via standards like SAML and SCIM.

• Deployment and configuration: Assist in the deployment and configuration of Zscaler services, ensuring all security policies and settings are correctly implemented and maintained.

• Manage and update Proxy Auto-Configuration (PAC) files after seniors review, including all exceptions and redirection configurations

• Policy optimization: Optimize security policies, access control lists (ACLs), and traffic forwarding methods for both ZIA and ZPA to enhance security and performance.

• Investigate and resolve SSL inspection bypass issues, using traffic decryption capabilities to analyze problems with specific URLs or applications.

• DLP Incidents: Manage and investigate incidents related to Data Loss Prevention (DLP), handling sensitive data exposure alerts and policy violations. Escalation point will be HP cyber DLP team.

• Troubleshooting complex issues: Diagnose and resolve advanced connectivity issues using log analysis, deep packet inspection (DPI), and other debugging techniques.

• Log analysis and reporting: Analyze Zscaler logs to monitor for security issues and generate reports on system performance and security events.

• L2 administrators review Sandbox reports in the Dashboards and Analytics sections

• Collaboration: Work closely with network, security, and DevOps teams, as well as third-party vendors and Zscaler support, to troubleshoot and resolve issues.

• Escalate to L3 or raise TAC case as required for further investigation, as required

• Integration management: Manage integrations between Zscaler and other security tools, such as SIEM (Security Information and Event Management) and EDR (Endpoint Detection and Response) systems.

• Documentation and training: Maintain and create detailed technical documentation for configurations, procedures, and troubleshooting steps. Provide training and knowledge transfer to L1 support staff. Advanced duties and skills

• API utilization: Leverage Zscaler APIs to automate policy updates, reporting, and monitoring tasks.

• Zero Trust implementation: Enforce zero-trust security principles and manage the different components that comprise the Zero Trust Exchange.

• Certificate management: Manage and troubleshoot issues related to enrollment and web server certificates used by Zscaler Client Connector and other infrastructure components.

• Advanced firewall policy: Manage integrated cloud firewall capabilities, including filtering policies, NAT control, and DNS control policies.

• User and device troubleshooting: Troubleshoot advanced user-specific issues, such as failed authentication or issues with the Zscaler Client Connector on endpoints.

Work Experience

Zscaler Internet Access (ZIA) and Zscaler Private Access (ZPA).