ZScaler Network SME

Job Description

Required

1. Must have a minimum of 5+ years of relevant experience

The candidate should have strong hands-on experience with:

Zscaler Internet Access (ZIA):
Security policies, URL filtering, SSL inspection, traffic forwarding, authentication, and advanced troubleshooting.

Zscaler Private Access (ZPA):
App Connectors, application segments, access policies, private application connectivity, and troubleshooting.

Zscaler Client Connector (ZCC):
Deployment, configuration, forwarding profiles, upgrades, endpoint compatibility, and troubleshooting.

Zscaler Digital Experience (ZDX):
Application performance monitoring, network path analysis, latency investigation, and troubleshooting.

PAC Files:
Advanced knowledge of JavaScript-based PAC files, proxy configurations, routing logic, and application-specific bypass requirements.

PowerShell:
Scripting and automation for troubleshooting and operational support.

2. Enterprise Networking and Advanced Troubleshooting

The ideal candidate should have strong knowledge of TCP/IP, DNS, routing, firewalls, VPNs, TLS/SSL, proxy architecture, and network traffic analysis.

The SME should be able to independently diagnose complex connectivity, authentication, application performance, and security policy issues; coordinate with other technical teams; and document root causes and corrective actions.

Certifications

Zscaler ZIA administration certification or equivalent official training.

Zscaler ZPA administration certification or equivalent official training.

Zscaler ZDX training or relevant certification, where available.

Cisco CCNA or CCNP.

CompTIA Security+.

Relevant Zscaler Zero Trust or advanced security training.

MUST BE ABLE TO PASS A CBP BI

Nice to Have

Enterprise Applications and Technology Integration - Highly Desirable

Our environment includes a wide range of enterprise technologies and specialized applications. The SME should be comfortable investigating Zscaler-related connectivity, authentication, performance, and security policy issues involving:

Security and monitoring:
Splunk, Cribl, CrowdStrike, and Okta.

Cloud platforms:
AWS and Microsoft Azure.

Developer tools:
GitHub, Docker, Git, Visual Studio, VS Code, development repositories, APIs, and other enterprise development platforms.

Mobile technologies:
Mobile devices, mobile applications, wireless connectivity, VPN interactions, and mobile device management solutions.

ZSIM:
Connectivity and security troubleshooting involving ZSIM-related applications and infrastructure.

WCTTV camera systems:
Network connectivity, remote access, streaming, and security policy compatibility for camera-related services.

Drone technologies:
Connectivity and application access requirements associated with drone-related platforms, management software, and supporting services.