Lead - Captive Operations

We are looking for an experienced Security Engineer with expertise in Zscaler Internet Access (ZIA), Zscaler Private Access (ZPA), Zscaler Client Connector (ZCC), and Enterprise DNS Security solutions. The candidate will be responsible for implementing, administering, monitoring, troubleshooting, and optimizing secure internet access, Zero Trust Network Access (ZTNA), DNS security, and web security controls.

Key Responsibilities

Zscaler Administration

Administer and manage Zscaler Internet Access (ZIA).

Configure and manage Zscaler Private Access (ZPA).

Manage Zscaler Client Connector (ZCC) deployments and policies.

Configure URL Filtering, SSL Inspection, Cloud Firewall, CASB, Sandbox, DLP, and Browser Isolation.

Create and maintain security policies for users, groups, and applications.

Troubleshoot user connectivity and application access issues.

Integrate Zscaler with Active Directory, Azure AD/Entra ID, Okta, and MFA solutions.

Monitor Zscaler dashboards and security logs.

Perform policy tuning and optimize web security controls.

DNS Security Administration

Manage Enterprise DNS Security solutions such as:

Infoblox BloxOne Threat Defense

DNS Firewall

Configure DNS filtering and security policies.

Detect and block malicious domains.

Investigate DNS tunneling activities.

Monitor DNS exfiltration attempts.

Implement DNS sinkholing.

Analyze DNS logs for threat detection.

Manage DNS forwarding and recursive resolver security.

Security Operations

Investigate web security incidents.

Analyze malware and phishing URLs.

Block Indicators of Compromise (IOCs).

Perform threat hunting using Zscaler and DNS telemetry.

Tune detection rules to reduce false positives.

Support Incident Response activities.

Coordinate with SOC, Network, Endpoint, and Cloud Security teams.

Integration Automation