Zscaler Technical Support Engineer

NTT DATA BUSINESS SOLUTIONS; Dadri, Hyderabad; On-site; INR 1,000,000 - 1,800,000; Full time

Job summary

NTT DATA BUSINESS SOLUTIONS is seeking a skilled Zscaler Administrator to manage and optimize ZIA/ZPA environments across Noida, Hyderabad and Bengaluru. The role requires incident management, root-cause analysis, and collaboration with cross-functional teams to ensure secure and efficient access to cloud services.

You will configure policies, manage PAC files and integrate with identity providers, while troubleshooting complex connectivity and security issues to maintain high performance.

Qualifications

• Experience with Zscaler Internet Access (ZIA) and Zscaler Private Access (ZPA).
• Ability to troubleshoot security, networking and performance problems.
• Experience with log analysis and DPI for issue resolution.

Responsibilities

• Act as escalation point for Zscaler-related issues and perform root cause analysis.
• Support ZIA and ZPA infrastructure management and deployment.
• Configure policies for ZIA traffic control and URL filtering.
• Integrate Zscaler with IdP via SAML/SCIM and manage certificate workflows.
• Collaborate with security, network and DevOps teams; escalate to L3 when needed.

Skills

Incident management

Problem solving

Log analysis

Troubleshooting

Zscaler knowledge

Collaboration

Tools

Zscaler

ZIA

ZPA

PAC files

SIEM

Job description

Job Requirements

Core responsibilities

• Incident and problem management: Act as the escalation point for Zscaler-related issues, perform root cause analysis, and ensure timely resolution of complex security, networking, and performance problems
• Infrastructure management: Manage and support the Zscaler security infrastructure, including Zscaler Internet Access (ZIA) and Zscaler Private Access (ZPA).
  o ZPA Application Access: Manage application segments and segment groups to define and control user access to private internal applications.
  Manage and update Proxy Auto-Configuration (PAC) files after seniors review, including all exceptions and redirection configurations.
  Support On-Prem PSE Proxy servers.
• ZIA Traffic Control: Configure Cloud App Control and URL filtering policies to govern web and SaaS application access.
• Identity Integration: Integrate the Zscaler platform with an identity provider (IdP) for user authentication and automated provisioning via standards like SAML and SCIM.
• Deployment and configuration: Assist in the deployment and configuration of Zscaler services, ensuring all security policies and settings are correctly implemented and maintained.
• Manage and update Proxy Auto-Configuration (PAC) files after seniors review, including all exceptions and redirection configurations
• Policy optimization: Optimize security policies, access control lists (ACLs), and traffic forwarding methods for both ZIA and ZPA to enhance security and performance.
• Investigate and resolve SSL inspection bypass issues, using traffic decryption capabilities to analyze problems with specific URLs or applications.
• DLP Incidents: Manage and investigate incidents related to Data Loss Prevention (DLP), handling sensitive data exposure alerts and policy violations. Escalation point will be HP cyber DLP team.
• Troubleshooting complex issues: Diagnose and resolve advanced connectivity issues using log analysis, deep packet inspection (DPI), and other debugging techniques.
• Log analysis and reporting: Analyze Zscaler logs to monitor for security issues and generate reports on system performance and security events.
• L2 administrators review Sandbox reports in the Dashboards and Analytics sections
• Collaboration: Work closely with network, security, and DevOps teams, as well as third-party vendors and Zscaler support, to troubleshoot and resolve issues.
• Escalate to L3 or raise TAC case as required for further investigation, as required
• Integration management: Manage integrations between Zscaler and other security tools, such as SIEM (Security Information and Event Management) and EDR (Endpoint Detection and Response) systems.
• Documentation and training: Maintain and create detailed technical documentation for configurations, procedures, and troubleshooting steps. Provide training and knowledge transfer to L1 support staff.
• Advanced duties and skills
• API utilization: Leverage Zscaler APIs to automate policy updates, reporting, and monitoring tasks.
• Zero Trust implementation: Enforce zero-trust security principles and manage the different components that comprise the Zero Trust Exchange.
• Certificate management: Manage and troubleshoot issues related to enrollment and web server certificates used by Zscaler Client Connector and other infrastructure components.
• Advanced firewall policy: Manage integrated cloud firewall capabilities, including filtering policies, NAT control, and DNS control policies.
• User and device troubleshooting: Troubleshoot advanced user-specific issues, such as failed authentication or issues with the Zscaler Client Connector on endpoints.

Work Experience

Zscaler Internet Access (ZIA) and Zscaler Private Access (ZPA).

Location - Noida,India,Hyderabad,Bengaluru