Contract -Certified Zscaler L3 Engineer (EDU 301 & EDU 302)

Title: Certified Zscaler L3 Engineer (EDU 301 & EDU 302)

Location: Remote in India (Bangalore preferred)

Duration: 6 months + extensions

Key Responsibilities

• Advanced Troubleshooting & Escalations
• Resolve complex issues in ZIA, ZPA, and ZDX environments as the final point of escalation.
• Perform root cause analysis (RCA) using logs, PCAPs, and advanced debugging.
• Directly engage with Zscaler TAC for unresolved incidents and feature defects.
• Platform Operations
• Manage and optimize ZIA policies (SWG, FWaaS, SSL inspection, DLP, CASB).
• Configure, troubleshoot, and maintain ZPA (App Connectors, App Segments, Private Service Edge, Cloud Connector).
• Ensure tenant health, policy syncs, connector availability, and certificate renewals.
• Security & Compliance Alignment
• Implement and maintain Zscaler configurations aligned with Zero Trust and security best practices.
• Support identity integrations with SAML, SCIM, and IdPs (Okta, Azure AD, Ping, etc.).
• Handle SSL inspection rules and PKI/certificate operations.
• Integration & Automation
• Work on SIEM/SOAR integrations (Splunk, Sentinel, QRadar, etc.).
• Use Zscaler APIs for operational automation, reporting, and monitoring.
• Maintain operational scripts or workflows to improve efficiency.
• Documentation & RCA
• Produce detailed RCA reports for major incidents.
• Maintain technical documentation and update configuration baselines.
• Provide direct input into continuous improvement for monitoring and alerting.

Required Skills & Experience

• Hands-on experience with ZIA, ZPA, and ZDX at enterprise scale.
• Deep knowledge of ZIA features: SWG, FWaaS, sandboxing, CASB, DLP, SSL inspection.
• Proficiency in ZPA components: App Segments, Connectors, Cloud Connector, Private Service Edge.
• Solid knowledge of TCP/IP, DNS, HTTP/HTTPS, SSL/TLS, VPNs.
• Experience with certificate management and PKI.
• Understanding of SD-WAN integrations and hybrid network models.
• Familiarity with SIEM/SOAR tools (Splunk, Sentinel, QRadar).
• Experience with endpoint management (ZCC deployment via MDM/Intune).
• Ability to analyze traffic flows, logs, and user experience metrics.
• Strong analytical and problem-solving ability.
• Clear technical communication for incident updates and RCA reports.
• Ability to work independently with minimal supervision in high-pressure environments.

Qualifications

• Education: Bachelors degree in computer science, Information Security, or related field (or equivalent experience).
• Preferred Certifications:
• Zscaler Certified Cloud Professional (Edu-200,EDU202)
• Must have (EDU 301 & EDU 302).

Experience

• 68 years in IT Security/Network Security roles.
• 4+ years of direct Zscaler hands-on administration in enterprise or MSSP environments.