About this role
Required
1. Must have a minimum of 5+ years of relevant experience
The candidate should have strong hands-on experience with:
- Zscaler Internet Access (ZIA): Security policies, URL filtering, SSL inspection, traffic forwarding, authentication, and advanced troubleshooting.
- Zscaler Private Access (ZPA): App Connectors, application segments, access policies, private application connectivity, and troubleshooting.
- Zscaler Client Connector (ZCC): Deployment, configuration, forwarding profiles, upgrades, endpoint compatibility, and troubleshooting.
- Zscaler Digital Experience (ZDX): Application performance monitoring, network path analysis, latency investigation, and troubleshooting.
- PAC Files: Advanced knowledge of JavaScript-based PAC files, proxy configurations, routing logic, and application-specific bypass requirements.
- PowerShell: Scripting and automation for troubleshooting and operational support.
2. Enterprise Networking and Advanced Troubleshooting
The ideal candidate should have strong knowledge of TCP/IP, DNS, routing, firewalls, VPNs, TLS/SSL, proxy architecture, and network traffic analysis.
The SME should be able to independently diagnose complex connectivity, authentication, application performance, and security policy issues; coordinate with other technical teams; and document root causes and corrective actions.
Certifications
- Zscaler ZIA administration certification or equivalent official training.
- Zscaler ZPA administration certification or equivalent official training.
- Zscaler ZDX training or relevant certification, where available.
- Cisco CCNA or CCNP.
- CompTIA Security+.
- Relevant Zscaler Zero Trust or advanced security training.
MUST BE ABLE TO PASS A CBP BI
Nice to Have
Enterprise Applications and Technology Integration – Highly Desirable
Our environment includes a wide range of enterprise technologies and specialized applications. The SME should be comfortable investigating Zscaler-related connectivity, authentication, performance, and security policy issues involving:
- Security and monitoring: Splunk, Cribl, CrowdStrike, and Okta.
- Cloud platforms: AWS and Microsoft Azure.
- Developer tools: GitHub, Docker, Git, Visual Studio, VS Code, development repositories, APIs, and other enterprise development platforms.
- Mobile technologies: Mobile devices, mobile applications, wireless connectivity, VPN interactions, and mobile device management solutions.
- ZSIM: Connectivity and security troubleshooting involving ZSIM-related applications and infrastructure.
- WCTTV camera systems: Network connectivity, remote access, streaming, and security policy compatibility for camera-related services.
- Drone technologies: Connectivity and application access requirements associated with drone-related platforms, management software, and supporting services.