Zscaler SASE & DLP Engineer

ZSCALER SASE & DLP ENGINEER

Location: Chennai/Bengaluru

Experience: 3-4 Years

Relevant Experience: 2+ Years of Hands-on Zscaler Experience

Function: Cybersecurity | Security Operations & Engineering

About the Role

We are looking for a Zscaler SASE & DLP Engineer to join our CISO team and take hands-on ownership of our Zscaler security environment.

The role will be responsible for the administration, operation, troubleshooting, optimization and continuous improvement of Zscaler Internet Access (ZIA), Zscaler Private Access (ZPA) and Zscaler DLP.

This is a hands-on engineering role requiring strong practical experience with Zscaler in an enterprise production environment. The ideal candidate should be able to independently configure security policies, troubleshoot complex access and connectivity issues, investigate security events and continuously improve the organization's Zero Trust and data protection controls.

What You Will Own

Zscaler Internet Access (ZIA)

• Administer and optimize ZIA policies for secure internet and SaaS access.
• Manage URL filtering, firewall, SSL inspection, application control and threat protection policies.
• Monitor ZIA traffic and security events and troubleshoot user connectivity issues.
• Perform policy tuning and maintain policy hygiene.

Zscaler Private Access (ZPA)

• Administer ZPA for secure Zero Trust access to private applications.
• Configure application segments, access policies, server groups and connectors.
• Onboard applications and users into ZPA.
• Troubleshoot application access and connectivity issues.
• Support the transition from traditional VPN-based access to Zero Trust access.

Zscaler DLP

• Administer and continuously improve Zscaler DLP policies.
• Configure data classification, dictionaries, DLP rules and exceptions.
• Investigate and respond to DLP incidents.
• Tune policies to reduce false positives while maintaining effective data protection.
• Support protection of sensitive and confidential information across web, SaaS and endpoint channels.

Security Operations & Engineering

• Act as the L2/L3 technical SME for Zscaler.
• Investigate security events and perform root-cause analysis.
• Work closely with SOC, Network, Endpoint, IAM and Application teams.
• Manage Zscaler-related incidents and technical escalations.
• Coordinate with Zscaler Support for complex issues.
• Conduct periodic policy reviews and identify opportunities for optimization and automation.
• Maintain operational documentation, metrics and security dashboards.

What We Are Looking For

• 3-4 years of overall IT/Cybersecurity experience.
• Minimum 2 years of hands-on experience administering Zscaler in a production enterprise environment.
• Strong hands-on experience with ZIA, ZPA and Zscaler DLP.
• Strong understanding of Zero Trust and SASE/SSE concepts.
• Good networking fundamentals including TCP/IP, DNS, HTTP/HTTPS, SSL/TLS, proxy and firewall concepts.
• Experience with Zscaler Client Connector.
• Experience troubleshooting Zscaler policies and user/application connectivity.
• Exposure to Microsoft Entra ID / Active Directory, SSO and MFA.
• Strong analytical and troubleshooting skills.
• Good communication and stakeholder management skills.

Preferred

• Zscaler certification.
• Experience with Zscaler Digital Experience (ZDX).
• CASB or cloud security experience.
• Microsoft Defender / Purview exposure.
• SIEM integration and security monitoring experience.
• PowerShell, Python or API-based automation experience.

Why This Role Matters

This role is central to strengthening our Zero Trust, SASE and Data Protection capabilities. You will work directly with a strategic security platform and have the opportunity to improve security controls, user experience, operational resilience and automation across the enterprise. As this is a lead role, you will be managing a team and need to ensure complete ownership of Zscaler tool.