Infrastructure Security Engineer - SASE

About the Role

We are seeking a Level 2 Engineer to support Zscaler and Zero Trust Networking BAU operations and device management. The candidate will be responsible for monitoring, troubleshooting, and ensuring optimal performance of Zscaler Internet Access (ZIA), Zscaler Private Access (ZPA), and Zero Trust security solutions across the enterprise network. Proficiency in managing Change and Incident processes is essential. The candidate must be prepared to work in a 24/7 shift environment.

Key Responsibilities

BAU Operations & Monitoring

• Monitor Zscaler dashboards and alerts for security threats, policy violations, and connectivity issues.
• Perform initial triage, troubleshooting, and escalation of Zscaler-related incidents.
• Support the implementation, maintenance, and fine-tuning of Zscaler security policies.
• Collaborate with L1 teams to resolve common issues and escalate complex problems to L3 teams.

Device Management & Zero Trust Security:

• Manage and troubleshoot Zscaler Client Connector (ZCC) agent deployment, updates, and health status.
• Assist in configuring ZIA and ZPA policies, firewall rules, and URL filtering to ensure secure and compliant access.
• Ensure seamless connectivity between users, applications, and cloud services in a Zero Trust model.
• Support VPN-less secure access to corporate applications using Zero Trust principles.

Incident & Problem Management:

• Investigate and resolve Zscaler agent, policy enforcement, and authentication issues.
• Work on Root Cause Analysis (RCA) for recurring connectivity and performance issues.
• Escalate unresolved issues to L3 engineers and collaborate with vendor support teams.

Security & Compliance:

• Ensure compliance with Zero Trust security policies, best practices, and enterprise security standards.
• Assist in policy reviews and security audits for Zscaler environments.
• Support the integration of Zscaler logs with SIEM solutions for advanced threat monitoring.

Documentation & Reporting:

• Maintain operational documentation, including troubleshooting steps, SOPs, and policy configurations.
• Generate reports on Zscaler performance, incident resolution trends, and policy enforcement statistic

Basic Qualifications

• BE / B'Tech / MCA / MSC + 2-5 years experience
• Zscaler Certified Cloud Professional (ZCCP-IA / ZCCP-PA) or Zscaler Certified Cloud Administrator (ZCCA) (preferred).
• ITIL Foundation Certification (preferred).
• 2+ years of experience in Zscaler, Zero Trust Networking, and cloud security operations.
• Hands-on experience with Zscaler Internet Access (ZIA) and Zscaler Private Access (ZPA).
• Understanding of Zero Trust security models and principles.
• Familiarity with proxy configurations, SSL inspection, and firewall policy management.
• Basic scripting knowledge (PowerShell, Python, Bash) for automation (preferred).

Preferred Qualifications

• ITIL Foundation.
• Excellent communication and teamwork abilities
• Has an experience of working with multiple clients and deployment