Senior Network Engineer (Zscaler Specialist)

Job Description – Senior Network Engineer (Zscaler Specialist)

Location: Remote / India
Experience: 5+ Years
Employment Type: Full-Time

Role Summary

We are seeking an experienced Senior Network Engineer with deep expertise in Zscaler Internet Access (ZIA) , Zscaler Private Access (ZPA) , and enterprise network infrastructure. The ideal candidate will possess strong hands-on experience in designing, implementing, administering, and troubleshooting secure network environments utilizing Zscaler's Zero Trust architecture.

The role requires extensive experience in enterprise networking, network security, cloud-delivered security platforms, SD-WAN integrations, and secure remote access solutions.

Key Responsibilities

Zscaler Administration & Engineering

• Design, deploy, configure, and support Zscaler Internet Access (ZIA) and Zscaler Private Access (ZPA) environments.
  
• Manage Zscaler policies, forwarding profiles, authentication mechanisms, SSL inspection, URL filtering, firewall policies, and data protection controls.
  
• Configure and maintain:
  
• Service Edges
  
• Client Connectors
  
• Access Policies
  
• Implement and administer Zero Trust Network Access (ZTNA) solutions across global enterprise environments.
  
• Troubleshoot complex ZIA and ZPA connectivity, authentication, and application access issues.
  
• Manage integration with Identity Providers such as:
  
• Okta
  
• Ping Identity
  
• Active Directory
  
• Perform application onboarding and migration from traditional VPN solutions to ZPA.
  
• Configure Cloud Firewall, Sandbox, DLP, CASB, and Advanced Threat Protection features within Zscaler.
  
• Develop and maintain operational documentation, runbooks, deployment guides, and architecture diagrams.
  

Network Operations & Infrastructure

• Administer enterprise-level LAN, WAN, Wireless, Internet Edge, and Data Center networks.
  
• Configure and troubleshoot:
  
• Cisco Routers & Switches
  
• Aruba Wireless Controllers
  
• Fortinet Firewalls
  
• SD-WAN Solutions
  
• Design resilient and highly available network architectures.
  
• Support network expansion, refresh projects, and infrastructure upgrades.
  
• Serve as L2/L3 escalation point for critical network and Zscaler incidents.
  
• Perform root cause analysis (RCA) and provide permanent resolutions.
  
• Troubleshoot:
  
• VPN Connectivity
  
• DNS Issues
  
• Application Access Problems
  
• Routing & Switching Issues
  
• Participate in on-call support and major incident management processes.
  

Monitoring & Reporting

• Monitor network availability and performance utilizing enterprise monitoring tools.
  
• Generate operational reports covering:
  
• Network Health
  
• Capacity Planning
  
• Security Events
  
• Proactively identify performance bottlenecks and recommend improvements.
  

Required Technical Skills

• Expert-level hands-on experience with:
  
• Zscaler Internet Access (ZIA)
  
• Fully Qualified Domain Name (FQDN)
  
• Zscaler Private Access (ZPA)
  
• Zscaler Digital Experience (ZDX)
  
• Advanced Threat Protection
  
• CASB
  

Networking

• Strong expertise in:
  
• TCP/IP
  
• DNS
  
• DHCP
  
• NAT
  
• VPN
  
• IPSEC
  
• BGP
  
• OSPF
  
• VLANs
  
• STP
  
• QoS
  
• Wireless Networking
  

Security

• Firewall Configuration & Administration
  
• Zero Trust Architecture
  
• Secure Web Gateway (SWG)
  
• Proxy Technologies
  
• Identity & Access Management
  
• SSL/TLS Technologies
  
• Network Access Control (NAC)
  
• AWS
  
• ExpressRoute
  
• Site-to-Site VPN
  
• SD-WAN Integration with Zscaler
  

Required Experience

• Minimum 5+ years of experience in Enterprise Network Engineering.
  
• Minimum 3+ years of hands-on experience with Zscaler ZIA and ZPA .
  
• Experience supporting global enterprise environments with 1,000+ users.
  
• Proven experience in network transformation and VPN-to-ZTNA migrations.
  
• Experience working within ITIL-based support models.
  

Educational Qualifications

• Bachelor's Degree in Computer Science, Information Technology, Networking, or related discipline.
  

Mandatory Certifications

Candidates should possess one or more of the following certifications:

Zscaler Certifications (Highly Preferred)