Zscaler Subject Matter Expert

The Zscaler Remote Access and Internet Security Subject Matter Expert (SME) will offer strategic guidance and specialised design knowledge, assisting the teams involved in the deployment, installation, support, and ongoing monitoring and management of the global Remote Access and Internet Security infrastructure. In this position, the SME will take the lead in overseeing corporate access network technologies, specifically focusing on Zscaler Private Access (ZPA) and Zscaler Internet Access (ZIA), ensuring their effective implementation and operation across the organization.

Major duties and responsibilities:

• A Zscaler subject matter expert is responsible for guiding strategic planning, ensuring optimal cloud security implementation, advising on best practices, and supporting organizational cybersecurity goals.
• Define global standards, policies, and procedures relating to Zscaler Remote Access and Internet Security
• Actively support the Service Delivery team in the implementation of the technology including documentation and training to support design changes and new feature implementations
• Produce high level architectural designs to support the implementation of new and existing technologies
• Lead Proof of Concept activities and make recommendations for adoption of new technologies
• Challenge our vendors to continuously improve their product and champion features that will deliver business value to Solventum
• The budget management responsibilities of a Zscaler SME include overseeing financial resources allocated to various projects and initiatives. This involves meticulous planning, monitoring, and controlling of budgets to ensure that financial resources are utilized efficiently and effectively.
• Keep informed on industry trends & vendor directions in the Remote Access and Internet Security space.
• Liaise with hardware vendors and business partners where required to resolve more challenging issues.
• To use the Global Solventum ITIL standards around Incident, Problem, & Change management to ensure proper processes are used to address and resolve issues and manage change.
• To undertake routine and specialised tasks to report on the health of the various services under the Remote Access and Internet Security portfolio from an enterprise perspective, including participation in IT Continuity Planning.
• Manage, maintain, and enhance the ZPA environment entirely through Terraform infrastructure-as-code (IaC).
• Design and implement secure access policies, application segmentation, and authentication methods in ZPA.
• Optimize ZIA deployment, including policy enforcement, web filtering, SSL inspection, and user experience improvements.
• Automate provisioning, configuration, and policy enforcement using Terraform and CI/CD pipelines.
• Troubleshoot and resolve technical issues related to Zscaler services, identity providers, and network integrations.
• Collaborate with network security, cloud, and IT infrastructure teams to integrate Zscaler solutions with existing environments (e.g., Azure AD, Okta, firewalls, SD-WAN).
• Maintain documentation of architecture, configurations, and standard operating procedures.
• Monitor system performance and ensure compliance with organizational security policies and regulatory requirements.
• Stay up to date with Zscaler product updates, security trends, and best practices.

Technical Skills:

• Overall 10+ years of experience in Network Security domain with minimum 5 years relevant technical experience in the following areas.
• Experience configuring, implementing, and troubleshooting Zscaler Internet Access (ZIA) and Zscaler Private Access (ZPA)
• Experience working with client-based and site-to-site VPN technologies, with specific knowledge of Cisco's VPN suite being of particular interest
• General experience across broad spectrum of network technologies is a plus (routing, switching, TCP/IP, DNS, WAN, UC etc.)
• Ability to communicate both verbally and written to management
• Extensive understanding of network architecture, design, implementation & roll-out processes