Job Requirements Core responsibilities • Incident and problem management: Act as the escalation point for Zscaler-related issues, perform root cause analysis, and ensure timely resolution of complex security, networking, and performance problems • Infrastructure management: Manage and support the Zscaler security infrastructure, including Zscaler Internet Access (ZIA) and Zscaler Private Access (ZPA). o ZPA Application Access: Manage application segments and segment groups to define and control user access to private internal applications. Manage and update Proxy Auto-Configuration (PAC) files after seniors review, including all exceptions and redirection configurations. Support On-Prem PSE Proxy servers. • ZIA Traffic Control: Configure Cloud App Control and URL filtering policies to govern web and SaaS application access. • Identity Integration: Integrate the Zscaler platform with an identity provider (IdP) for user authentication and automated provisioning via standards like SAML and SCIM. • Deployment and configuration: Assist in the deployment and configuration of Zscaler services, ensuring all security policies and settings are correctly implemented and maintained. • Manage and update Proxy Auto-Configuration (PAC) files after seniors review, including all exceptions and redirection configurations • Policy optimization: Optimize security policies, access control lists (ACLs), and traffic forwarding methods for both ZIA and ZPA to enhance security and performance. • Investigate and resolve SSL inspection bypass issues, using traffic decryption capabilities to analyze problems with specific URLs or applications. • DLP Incidents: Manage and investigate incidents related to Data Loss Prevention (DLP), handling sensitive data exposure alerts and policy violations. Escalation point will be HP cyber DLP team. • Troubleshooting complex issues: Diagnose and resolve advanced connectivity issues using log analysis, deep packet inspection (DPI), and other debugging techniques. • Log analysis and reporting: Analyze Zscaler logs to monitor for security issues and generate reports on system performance and security events. • L2 administrators review Sandbox reports in the Dashboards and Analytics sections • Collaboration: Work closely with network, security, and DevOps teams, as well as third-party vendors and Zscaler support, to troubleshoot and resolve issues. • Escalate to L3 or raise TAC case as required for further investigation, as required • Integration management: Manage integrations between Zscaler and other security tools, such as SIEM (Security Information and Event Management) and EDR (Endpoint Detection and Response) systems. • Documentation and training: Maintain and create detailed technical documentation for configurations, procedures, and troubleshooting steps. Provide training and knowledge transfer to L1 support staff. Advanced duties and skills • API utilization: Leverage Zscaler APIs to automate policy updates, reporting, and monitoring tasks. • Zero Trust implementation: Enforce zero-trust security principles and manage the different components that comprise the Zero Trust Exchange. • Certificate management: Manage and troubleshoot issues related to enrollment and web server certificates used by Zscaler Client Connector and other infrastructure components. • Advanced firewall policy: Manage integrated cloud firewall capabilities, including filtering policies, NAT control, and DNS control policies. • User and device troubleshooting: Troubleshoot advanced user-specific issues, such as failed authentication or issues with the Zscaler Client Connector on endpoints. Work Experience Zscaler Internet Access (ZIA) and Zscaler Private Access (ZPA).