Network Security Zscaler Subject Matter Expert (SME)

• Drive strategic planning and architecture: Lead design, deployment, and optimization of Zscaler ZIA/ZPA solutions according to business and compliance requirements, collaborating with security architects and cloud/network teams.
• Lead current state assessments: Review policy configurations, application segments, user access policies, and document current deployment gaps and pain points.
• Develop security standards and policies: Define and enforce organizational security standards, policies, and procedures for Zscaler platforms (ZIA & ZPA), guiding teams in secure access, granular user to application segmentation, URL/Cloud App filtering, authentication, device posture controls and zero trust.
• Troubleshoot and resolve advanced issues: Conduct root cause analysis, support escalations, and resolve complex technical problems related to ZCC profiles, user authentication, traffic flows, cloud integrations, and solution stability.
• Lead global service improvements: Drive automation initiatives, handle change management, document runbooks and SOPs, and share knowledge through training sessions.
• Consult on Zero Trust best practices: Advise business partners and vendors on emerging Zscaler features, recommend technology adoption, and optimize deployment strategies.
• Oversee compliance and reporting: Monitor Zscaler environments for regulatory compliance, maintain documentation, and support audits and risk assessments.

Required Skills and Experience

• Strong expertise with Zscaler Internet Access (ZIA) & Private Access (ZPA), deep understanding of cloud security (CASB, DLP, SSL inspection, Zero Trust, Threat Protection).
• Proficiency in SAML, SCIM, Azure AD, SASE, SSE, Zero Trust, network protocols, and troubleshooting tools.
• Experience designing and managing large-scale, enterprise Zscaler deployments
• Able to plan and run multi-stakeholder workshops (Security, Network, Identity, Apps, Operations), align standards across teams, and own end-to-end implementation from scratch to finish (assessment design build test cutover hypercare) with clear decision-making, risks/issues tracking, and crisp communications.
• Exceptional written and verbal communication with solid documentation and presentation skills; creates audit-ready HLD/LLD with high-quality diagrams (segmentation, connector placement, traffic flows, identity/SSL/DLP), plus SOPs/runbooks, RACIs, and change recordsable to explain complex topics to both technical and business audiences
• Minimum 8+ years in network security, with significant hands-on Zscaler experience preferred along with its solution design

Qualifications & Skills

• Expertise in Zscaler ZPA and ZIA: Architecture, solution design, deployment, policy creation and troubleshooting.
• Security and Networking: Deep operational knowledge of routing, switching, firewalls, proxies, CASB, DLP, SSL inspection, VPN replacement, Zero Trust concepts.
• Identity and Integration: Experience with SAML SSO, SCIM, Azure AD, and integration with enterprise tools (SIEM, ITSM, micro-segmentation platforms).
• Documentation: Strong HLD/LLD creation skills, diagramming of architectures and flows, maintaining detailed technical documentation.
• Process and Automation: ITIL familiarity, scripting for automation (Python, PowerShell a plus), API integration for repeatable tasks.

• Role & responsibilities