Network Security Engineer (L2/L3)

Job Summary

Manage and support enterprise SASE operations using Zscaler ZIA and ZPA platforms, focusing on BAU operations, incident management, policy administration, troubleshooting, and secure user connectivity.

Responsibilities

• Manage daily operations of Zscaler Internet Access (ZIA) and Zscaler Private Access (ZPA) services to ensure continuous secure connectivity
• Troubleshoot L2/L3 issues related to SSO/SAML, SSL inspection, PAC/forwarding, tunnels/connectors, DNS, and policy enforcement to resolve incidents efficiently
• Configure and maintain Zscaler Client Connector, GRE/IPsec tunnels, PAC files, application segments, access policies, SSL inspection, and URL filtering for optimized security posture
• Administer policies, implement changes, and manage exceptions to maintain compliance and operational integrity
• Support integrations with identity and security platforms including Azure AD/Entra ID, Okta, ADFS, Splunk, QRadar, ServiceNow, Intune, Jamf, and multi-factor authentication solutions to enhance system interoperability
• Manage connector upgrades, certificate renewals, application onboarding, and user/group administration to sustain platform performance and security
• Develop and maintain Standard Operating Procedures (SOPs), runbooks, and audit/compliance documentation to support operational transparency and governance
• Support Menlo Web Isolation policies, including allow-listing and troubleshooting isolation issues to protect web access

Required competencies and certifications

• Zscaler Certifications (mandatory as per role summary and mandatory section)

Preferred competencies and qualifications

• Experience integrating Security Information and Event Management (SIEM) and Data Loss Prevention (DLP) systems to enhance security monitoring
• Proficiency in PowerShell or Python scripting for automation of routine tasks and operational efficiencies