Technical Architect - Zscaler

• ZIA (Zscaler Internet Access) :
• Internet Security : Deep understanding of secure web gateway (SWG), SSL/TLS inspection, malware protection, content filtering, and DLP.
• URL Filtering and Threat Detection : Knowledge of configuring and managing URL filtering, sandboxing, and advanced threat protection within ZIA.
• Firewall and Policy Management : Ability to configure policies for internet access, data protection, and application control.
• Troubleshooting : Skills in diagnosing and resolving issues related to traffic forwarding, latency, and user access in a cloud-based SWG environment.
• ZPA (Zscaler Private Access) :
• Zero Trust Architecture : Expertise in implementing ZPA s zero trust network access (ZTNA) model.
• Application Segmentation : Knowledge of configuring policies to provide secure access to internal apps without exposing them to the internet.
• Authentication and Identity : Proficiency with multi-factor authentication (MFA), Single Sign-On (SSO), and integration with identity providers (IDPs).
• Client Connector Management : Experience in managing and troubleshooting Zscaler Client Connector (ZCC) agents.

2. Networking Knowledge

• Network Protocols : Strong understanding of TCP/IP, DNS, HTTP/S, IPsec, VPNs, and network routing.
• Security Protocols : Familiarity with TLS/SSL, IPsec, and GRE tunnels for secure data transfer.

Secondary Skills:

1. Automation Skills

• Scripting and Automation : Basic to intermediate skills in scripting languages like Python, PowerShell, or Bash for automating repetitive tasks, reporting, and monitoring.
• APIs : Experience with Zscaler s API for integrating ZIA/ZPA with third-party tools and automating administrative tasks such as policy changes, configuration management, and user provisioning.
• Automation Tools : Familiarity with tools like Ansible, Terraform, or scripting via Zscaler s API to automate configuration, deployment, or compliance tasks.

2. Cloud Security Best Practices

• CASB : Knowledge of cloud access security broker (CASB) functionalities, including visibility, governance, and protection across SaaS apps.
• Cloud Networking : Experience with cloud platforms and security configurations, including how Zscaler integrates with IaaS and PaaS services.

Soft Skills:

• Problem Solving and Troubleshooting : Analytical skills to resolve complex issues with minimal supervision.
• Documentation and Reporting : Ability to document configurations, procedures, and troubleshooting steps effectively.
• Collaboration : Teamwork and communication skills to collaborate with security teams, developers, and IT personnel.
• Training & Mentoring : Ability to lead teams, mentor junior engineers, and deliver training on firewall technologies.