Senior Network Engineer (Zscaler Specialist)

This is a remote position. Job Description – Senior Network Engineer (Zscaler Specialist) Location:Remote / India Experience: 5+ Years Employment Type: Full-Time Role Summary We are seeking an experienced Senior Network Engineer with deep expertise in Zscaler Internet Access (ZIA), Zscaler Private Access (ZPA), and enterprise network infrastructure. The ideal candidate will possess strong hands-on experience in designing, implementing, administering, and troubleshooting secure network environments utilizing Zscaler's Zero Trust architecture. The role requires extensive experience in enterprise networking, network security, cloud-delivered security platforms, SD-WAN integrations, and secure remote access solutions. Key Responsibilities Zscaler Administration & Engineering - Design, deploy, configure, and support Zscaler Internet Access (ZIA) and Zscaler Private Access (ZPA) environments. - Manage Zscaler policies, forwarding profiles, authentication mechanisms, SSL inspection, URL filtering, firewall policies, and data protection controls. - Configure and maintain: - App Connectors - Service Edges - Client Connectors - Browser Access - Segment Groups - Access Policies - Implement and administer Zero Trust Network Access (ZTNA) solutions across global enterprise environments. - Troubleshoot complex ZIA and ZPA connectivity, authentication, and application access issues. - Manage integration with Identity Providers such as: - Azure AD / Entra ID - Okta - Ping Identity - Active Directory - Perform application onboarding and migration from traditional VPN solutions to ZPA. - Configure Cloud Firewall, Sandbox, DLP, CASB, and Advanced Threat Protection features within Zscaler. - Develop and maintain operational documentation, runbooks, deployment guides, and architecture diagrams. Network Operations & Infrastructure - Administer enterprise-level LAN, WAN, Wireless, Internet Edge, and Data Center networks. - Configure and troubleshoot: - Cisco Routers & Switches - Aruba Wireless Controllers - Palo Alto Firewalls - Fortinet Firewalls - SD-WAN Solutions - Design resilient and highly available network architectures. - Support network expansion, refresh projects, and infrastructure upgrades. Incident Management & Troubleshooting - Serve as L2/L3 escalation point for critical network and Zscaler incidents. - Perform root cause analysis (RCA) and provide permanent resolutions. - Troubleshoot: - VPN Connectivity - DNS Issues - Authentication Failures - Application Access Problems - Routing & Switching Issues - SSL Inspection Challenges - Participate in on-call support and major incident management processes. Monitoring & Reporting - Monitor network availability and performance utilizing enterprise monitoring tools. - Generate operational reports covering: - Network Health - Capacity Planning - Security Events - Zscaler Service Utilization - Proactively identify performance bottlenecks and recommend improvements. Required Technical Skills Zscaler Technologies (Mandatory) - Expert-level hands-on experience with: - Zscaler Internet Access (ZIA) - Fully Qualified Domain Name (FQDN) - Zscaler Private Access (ZPA) - Zscaler Digital Experience (ZDX) - Zscaler Client Connector - Cloud Firewall - Advanced Threat Protection - Cloud Sandbox - Data Loss Prevention (DLP) - CASB Networking - Strong expertise in: - TCP/IP - DNS - DHCP - NAT - VPN - IPSEC - BGP - OSPF - VLANs - STP - QoS - Wireless Networking Security - Firewall Configuration & Administration - Zero Trust Architecture - Secure Web Gateway (SWG) - Proxy Technologies - Identity & Access Management - SSL/TLS Technologies - Network Access Control (NAC) Cloud & Hybrid Networking - Microsoft Azure - AWS - Hybrid Cloud Connectivity - ExpressRoute - Site-to-Site VPN - SD-WAN Integration with Zscaler Required Experience - Minimum 5+ years of experience in Enterprise Network Engineering. - Minimum 3+ years of hands-on experience with Zscaler ZIA and ZPA. - Experience supporting global enterprise environments with 1,000+ users. - Proven experience in network transformation and VPN-to-ZTNA migrations. - Experience working within ITIL-based support models. Educational Qualifications - Bachelor's Degree in Computer Science, Information Technology, Networking, or related discipline. Mandatory Certifications Candidates should possess one or more of the following certifications: Zscaler Certifications (Highly Preferred) - Zscaler Certified Administrator (ZCCA) - Zscaler Certified Architect (ZCCA-IA / ZCCA-PA) - Zscaler Certified Professional (ZCCP) - Zscaler Certified Expert (ZCCE) Networking Certifications - Cisco CCNA - Cisco CCNP Enterprise - Aruba Certified Professional - Juniper JNCIA/JNCIS Security Certifications (Preferred) - Palo Alto PCNSA / PCNSE - Fortinet NSE Originally posted on Himalayas