Zscaler Consultant

Tata Consultancy Services Limited; Cincinnati (OH); Presencial; USD 110 000 - 130 000; Tempo integral

Vantagens oferecidas por esta oferta de emprego

Discretionary Annual Incentive

Comprehensive Medical Coverage

401K Plan

Resumo da oferta

Tata Consultancy Services Limited in Cincinnati seeks a Senior Engineer to manage and optimize the Zero Trust secure-connectivity platform, covering internet access, private applications, branch and cloud connectivity, and digital experience monitoring.

Responsibilities include onboarding/offboarding apps, enforcing least-privilege through policy configuration, and coordinating with SOC and IT teams for incident response and change management.

Qualificações

• Hands-on experience administering Zscaler Internet Access (ZIA) and Zscaler Private Access (ZPA) in large global environments.
• Experience onboarding applications and SaaS services with prerequisite validation and identity coordination.
• Experience monitoring ZIA/ZPA, connectivity, and alerting; strong knowledge of ZIA/ZPA controls.

Responsabilidades

• Provide end-to-end operational management of the global Zero Trust platform.
• Administer ZIA and ZPA across FedRAMP Moderate, Commercial, and China environments.
• Onboard and offboard private applications and SaaS services with proper segmentation and access policies.
• Configure ZIA controls: URL filtering, SSL inspection, Cloud Firewall, DLP, CASB, PAC, Client Connector.
• Configure ZPA segments, Connector Groups, access policies, and Browser Access.

Conhecimentos

ZIA administration

ZPA administration

FedRAMP compliance

SIEM integration

RBAC and least privilege

Zero Trust principles

Formação académica

Bachelor of Computer Science

Ferramentas

NSS

LSS

SIEM Platforms

Descrição da oferta de emprego

Job Description

Must Have Technical/Functional Skills

• Hands-on experience administering Zscaler Internet Access (ZIA) and Zscaler Private Access (ZPA) in large global environments.
• Experience supporting secure internet access, private application access, branch and cloud connectivity, endpoint connectivity, and digital experience monitoring.
• Experience operating Zscaler services across separated FedRAMP Moderate, Commercial, and China environments while observing regulatory and data-residency boundaries.
• Strong knowledge of ZIA URL filtering, SSL inspection, Cloud Firewall, IPS, Cloud Sandbox, DLP, inline CASB, bandwidth controls, PAC files, and Client Connector enrollment.
• Strong knowledge of ZPA application segments, segment groups, access policies, App Connectors, Connector Groups, Private Service Edge, Client Connector policies, timeout and reauthentication policies, Browser Access, and privileged-access use cases.
• Experience onboarding applications and SaaS services, validating prerequisites, coordinating identity integration, and implementing least-privilege and application-segmentation controls.
• Experience with access exceptions, policy updates, allowlist and blocklist expansion, RBAC, segregation of duties, and export-controlled access boundaries.
• Experience building and managing GRE tunnels, branch connectivity, cloud connectors, and centralized internet-egress configurations.
• Experience monitoring ZIA/ZPA availability and health, Connector and Service Edge alerts, certificate expiry, Client Connector, PAC, DNS, authentication, and application-connectivity issues.
• Experience integrating Nanolog Streaming Service (NSS) and Log Streaming Service (LSS) with SIEM platforms and supporting ServiceNow incident, request, problem, and change workflows.
• Working knowledge of SAML, SCIM, identity providers, MFA, DNS, HTTP/HTTPS, TLS certificates, networking, routing, proxy technologies, and Zero Trust principles.
• Zscaler certifications such as ZCCA-IA, ZCCA-PA, ZCCP-IA, or ZCCP-PA are preferred.

Roles & Responsibilities

• Provide end-to-end operational management of the global Zero Trust secure-connectivity platform supporting internet access, private applications, branch and cloud connectivity, endpoint connectivity, and digital experience monitoring.
• Administer ZIA and ZPA services across approved FedRAMP Moderate, Commercial, and China environments while maintaining required compliance and data-residency separation.
• Onboard and offboard private applications and SaaS services, including prerequisite validation, identity coordination, App Connector readiness, application segmentation, access-policy configuration, testing, documentation, and handover.
• Configure and maintain ZIA controls including URL filtering, SSL inspection, Cloud Firewall, IPS, Sandbox, DLP, CASB, bandwidth policies, PAC files, and Client Connector settings.
• Configure and maintain ZPA application segments, Connector Groups, access policies, Private Service Edge, Client Connector policies, timeout and reauthentication controls, and Browser Access where applicable.
• Process approved access exceptions, policy changes, allowlist/blocklist requests, application-access changes, and firewall or network dependencies through formal change controls.
• Monitor platform availability, health, connectors, service edges, certificates, logs, endpoint connectivity, application access, and digital-experience indicators; log and triage incidents in ITSM.
• Provide L2/L3 troubleshooting for ZIA, ZPA, Client Connector, PAC, SSL inspection, authentication, DNS, routing, tunnel, connector, policy, and application-access issues.
• Build, validate, monitor, and maintain GRE tunnels and related branch or centralized-egress connectivity as assigned.
• Integrate and support NSS/LSS log streaming to SIEM platforms, validate logging coverage, and coordinate alert or telemetry issues with SOC teams.
• Apply RBAC, least privilege, segregation of duties, export-control restrictions, and compliance-boundary controls to platform administration and access policies.
• Maintain SOPs, knowledge articles, configuration records, application inventories, policy evidence, ticket updates, health reports, and audit-support documentation.
• Coordinate incidents, changes, problem investigations, maintenance, upgrades, vendor cases, and service restoration with identity, endpoint, network, cloud, application, SOC, and Zscaler support teams.
• Provide scheduled-work and on-call support according to the approved coverage model, including planned maintenance and critical incident escalation.

Generic Managerial Skills, If any

Strong communication, stakeholder coordination, technical documentation, incident ownership, disciplined change execution, and ability to work with global identity, endpoint, network, cloud, application, SOC, compliance, and vendor teams.

Salary Range: $110,000 - $130,000 per year

TCS Employee Benefits Summary:

• Discretionary Annual Incentive.
• Comprehensive Medical Coverage: Medical & Health, Dental & Vision, Disability Planning & Insurance, Pet Insurance Plans.
• Family Support: Maternal & Parental Leaves.
• Insurance Options: Auto & Home Insurance, Identity Theft Protection.
• Convenience & Professional Growth: Commuter Benefits & Certification & Training Reimbursement.
• Time Off: Vacation, Time Off, Sick Leave & Holidays.
• Legal & Financial Assistance: Legal Assistance, 401K Plan, Performance Bonus, College Fund, Student Loan Refinancing.

Location

Cincinnati, OH

Function

TECHNOLOGY

Role

Senior Engineer

ID

434517

Skills

Network Security - Blue Coat,Zscalar

Salary Range

$110,000 - $130,000

Desired Candidate Profile

Qualifications

BACHELOR OF COMPUTER SCIENCE