Z SCALER Technical Support

NTT America, Inc.; Hyderabad; On-site; INR 1,500,000 - 1,800,000; Full time

Job summary

NTT America, Inc. seeks an experienced Zscaler engineer to manage and optimize ZIA and ZPA deployments, handle incident response, and collaborate with security teams across the organization.

You will work on identity integration, policy tuning, and advanced troubleshooting to ensure secure and reliable access to SaaS and internal applications.

Qualifications

• Experience with enterprise security platforms and incident response is desirable.
• Strong analytical and problem-solving skills for root-cause analysis.
• Familiarity with network, security, and identity integration concepts.

Responsibilities

• Incident and problem management: act as escalation point for Zscaler-related issues and perform root cause analysis.
• Infrastructure management: support Zscaler security infrastructure including ZIA and ZPA.
• ZPA Application Access: manage segments and groups to control user access to internal apps.
• Update PAC files after review, including exceptions and redirections.
• Support On-Prem PSE Proxy servers and configure Zscaler policies.
• ZIA Traffic Control: configure policies for app control and URL filtering.
• Identity Integration: integrate Zscaler with IdP using SAML/SCIM.
• Deployment and configuration: assist in deploying and tuning Zscaler services.
• Policy optimization: refine security policies and ACLs for ZIA and ZPA.
• SSL inspection: investigate bypass issues using traffic decryption methods.
• DLP Incidents: manage DLP alerts; escalation to HP cyber DLP team.
• Troubleshoot complex issues via log analysis and DPI.
• Log analysis: monitor Zscaler logs for security events.
• L2 admin reviews Sandbox dashboards and analytics
• Collaboration: work with network, security, DevOps, vendors, and Zscaler support.
• Escalate to L3 or raise TAC cases as required.
• Integration management: integrate Zscaler with SIEM/EDR and other tools.
• Documentation and training: document configurations and provide knowledge transfer.
• API utilization: automate policy updates and monitoring with Zscaler APIs.
• Zero Trust implementation: enforce zero-trust across components.
• Certificate management: manage enrollment and certificates used by clients and infra.
• Advanced firewall policy: manage cloud firewall policies, NAT, and DNS controls.
• User and device troubleshooting: resolve authentication and endpoint issues.

Job description

Job Requirements

Core responsibilities

• Incident and problem management: Act as the escalation point for Zscaler-related issues, perform root cause analysis, and ensure timely resolution of complex security, networking, and performance problems

• Infrastructure management: Manage and support the Zscaler security infrastructure, including Zscaler Internet Access (ZIA) and Zscaler Private Access (ZPA).

• o ZPA Application Access: Manage application segments and segment groups to define and control user access to private internal applications.

• Manage and update Proxy Auto-Configuration (PAC) files after seniors review, including all exceptions and redirection configurations.

• Support On-Prem PSE Proxy servers.

• ZIA Traffic Control: Configure Cloud App Control and URL filtering policies to govern web and SaaS application access.

• Identity Integration: Integrate the Zscaler platform with an identity provider (IdP) for user authentication and automated provisioning via standards like SAML and SCIM.

• Deployment and configuration: Assist in the deployment and configuration of Zscaler services, ensuring all security policies and settings are correctly implemented and maintained.

• Manage and update Proxy Auto-Configuration (PAC) files after seniors review, including all exceptions and redirection configurations

• Policy optimization: Optimize security policies, access control lists (ACLs), and traffic forwarding methods for both ZIA and ZPA to enhance security and performance.

• Investigate and resolve SSL inspection bypass issues, using traffic decryption capabilities to analyze problems with specific URLs or applications.

• DLP Incidents: Manage and investigate incidents related to Data Loss Prevention (DLP), handling sensitive data exposure alerts and policy violations. Escalation point will be HP cyber DLP team.

• Troubleshooting complex issues: Diagnose and resolve advanced connectivity issues using log analysis, deep packet inspection (DPI), and other debugging techniques.

• Log analysis and reporting: Analyze Zscaler logs to monitor for security issues and generate reports on system performance and security events.

• L2 administrators review Sandbox reports in the Dashboards and Analytics sections

• Collaboration: Work closely with network, security, and DevOps teams, as well as third-party vendors and Zscaler support, to troubleshoot and resolve issues.

• Escalate to L3 or raise TAC case as required for further investigation, as required

• Integration management: Manage integrations between Zscaler and other security tools, such as SIEM (Security Information and Event Management) and EDR (Endpoint Detection and Response) systems.

• Documentation and training: Maintain and create detailed technical documentation for configurations, procedures, and troubleshooting steps. Provide training and knowledge transfer to L1 support staff. Advanced duties and skills

• API utilization: Leverage Zscaler APIs to automate policy updates, reporting, and monitoring tasks.

• Zero Trust implementation: Enforce zero-trust security principles and manage the different components that comprise the Zero Trust Exchange.

• Certificate management: Manage and troubleshoot issues related to enrollment and web server certificates used by Zscaler Client Connector and other infrastructure components.

• Advanced firewall policy: Manage integrated cloud firewall capabilities, including filtering policies, NAT control, and DNS control policies.

• User and device troubleshooting: Troubleshoot advanced user-specific issues, such as failed authentication or issues with the Zscaler Client Connector on endpoints.

Work Experience

Zscaler Internet Access (ZIA) and Zscaler Private Access (ZPA).