Pi Square Technologies - Zscaler Security Engineer

Job Title : Zscaler Security Engineer (ZIA/ZPA)

Job Description :

We are seeking an experienced Zscaler Security Engineer to join our cybersecurity team. The ideal candidate will possess deep expertise in Zscaler Internet Access (ZIA) and Zscaler Private Access (ZPA), with hands-on experience in cloud security operations, Zero Trust architecture, identity integrations, and security policy management. This role will be responsible for designing, implementing, optimizing, and supporting enterprise-wide Zscaler deployments while ensuring secure and seamless access for users across global environments.

The successful candidate will collaborate with cross-functional teams to drive security initiatives, manage technology rollouts, and enhance the organization's cloud security posture through industry best practices.

Key Responsibilities :

- Administer, configure, and support Zscaler Internet Access (ZIA) and Zscaler Private Access (ZPA) environments.

- Design, implement, and maintain security policies, access controls, authentication mechanisms, and network security configurations.

- Manage and optimize Zero Trust Network Access (ZTNA) frameworks and cloud security solutions.

- Configure and troubleshoot advanced security features, including :

1. SSL Inspection

2. Web Filtering

3. DNS Security

4. DNS Tunneling Prevention

5. Traffic Forwarding

6. Application Segmentation

- Lead Zscaler deployment projects, upgrades, migrations, and global security technology rollouts.

- Integrate identity and access management platforms using :

1. SAML

2. SCIM

3. Azure Active Directory (Azure AD)

4. Other enterprise identity providers

- Monitor security events, investigate incidents, and perform root cause analysis.

- Utilize Splunk for log analysis, dashboard creation, alert configuration, and operational monitoring.

- Collaborate with network, infrastructure, and security teams to ensure secure and scalable cloud access solutions.

- Support change management, incident management, and service requests in accordance with ITIL best practices.

- Develop and maintain technical documentation, operational procedures, and knowledge articles.

- Provide advanced troubleshooting and resolution for Zscaler-related incidents and performance issues.

- Stay updated on emerging cloud security trends, threats, and Zscaler platform enhancements.

Required Skills & Qualifications :

- Strong hands-on experience with Zscaler Internet Access (ZIA) and Zscaler Private Access (ZPA).

- Expertise in security policy design, authentication configuration, access management, and advanced troubleshooting.

- In-depth understanding of :

1. Zero Trust Architecture

2. Secure Web Gateway (SWG)

3. Cloud Security

4. SSL/TLS Inspection

5. DNS Security

6. Web Filtering Technologies

- Experience with identity integration technologies such as SAML, SCIM, Azure AD, and Single Sign-On (SSO)

solutions.

- Working knowledge of Splunk for security monitoring and log analysis.

- Familiarity with networking concepts including TCP/IP, DNS, VPNs, proxies, and secure access technologies.

- Experience managing large-scale enterprise or global security deployments.

- Understanding of ITIL processes, including Change Management, Incident Management, and Problem Management.

- Strong analytical, troubleshooting, and problem-solving skills.

- Excellent communication and stakeholder management abilities.

Preferred Candidate Profile :

- Relevant experience in cloud security, network security, or cybersecurity engineering roles.

- Experience working in enterprise-scale or multinational environments.

- Hands-on exposure to cloud platforms such as Azure, AWS, or Google Cloud is an advantage.

- Strong understanding of security compliance and governance frameworks.

Preferred Certifications :

- Zscaler Certified Professional (ZCP) or higher-level Zscaler certifications (L3).

- Additional security certifications such as CISSP, CCSP, Security+, or equivalent will be an added advantage