Network Security Engineer

Job role : Network Security Engineer Zscaler Internet Access / Secure Web Gateway

Client/Company : Universal Technology solution uebiz Universal Technology Solutions - Customized Your Way

Network Security Engineer — Zscaler Internet Access / Secure Web Gateway

India-based role supporting a large U.S. banking client through UTS, a vendor-independent systems integrator operating across eight countries.

Employer

Universal Technology Solutions (India)

Type

Full-time, permanent

Location

Gurgaon, Haryana — hybrid, predominantly onsite at the UTS Gurgaon office

Experience

4–8 years total; 2+ years hands-on Zscaler

Shift

2:00 PM – 11:00 PM IST

Key Responsibilities

• Configure and manage Zscaler ZIA policies, URL filtering, and SSL/TLS inspection.
• Troubleshoot Zscaler Client Connector, PAC files, GRE/IPsec tunnels, DNS, and network connectivity.
• Investigate application access issues, authentication failures, and SSL certificate problems.
• Integrate Zscaler logs with Splunk or other SIEM tools.
• Manage firewalls, VPNs, traffic forwarding, and network security incidents.
• Handle incident management, RCA, change implementation, and technical documentation.
• Coordinate with U.S. stakeholders and security/network teams.

Mandatory Skills

• 2+ years of hands-on Zscaler ZIA administration and troubleshooting.
• Strong knowledge of ZIA policies, SSL inspection, and traffic forwarding.
• Splunk or other SIEM/log management experience.
• Hands-on firewall experience: Palo Alto, Fortinet, or equivalent.
• Strong networking fundamentals: TCP/IP, DNS, NAT, VPN/IPsec, routing, and TLS.
• Knowledge of PAC files, GRE tunnels, and certificate management.
• ITIL-based incident and change management.
• B.E./B.Tech/MCA or equivalent qualification, as accepted by the employer.
• Good communication skills for working with U.S. stakeholders.

Good to Have

• ZPA, ZDX, Entra ID/Active Directory, SAML/SCIM.
• Python/PowerShell scripting and Zscaler API knowledge.
• Cloud security, DLP, CASB, and proxy migration experience.
• Banking/BFSI experience and Zscaler certifications.

Screening questions for the first round

• Walk me through what happens, step by step, from a laptop opening a browser to the page rendering, with Client Connector installed and SSL inspection enabled.
• An application breaks only for users behind ZIA. How do you isolate whether it is inspection, policy, DNS, or the application itself?
• What is your process for granting an SSL inspection bypass, and who approves it?
• When would you choose a GRE tunnel over IPSec, or a PAC file over Client Connector?
• Describe the largest ZIA environment you have worked in — seat count, number of locations, and what you personally owned versus what the team owned.
• Have you migrated off a legacy proxy? What surprised you?
• Describe a change you made that caused an incident. What did you change in your process afterwards?
• Splunk and Log Integration: Explain how you have integrated Zscaler logs with Splunk. Have you configured NSS or Log Streaming Service, and how do you troubleshoot missing logs or ingestion failures?
• Firewall Experience: What hands-on experience do you have with Palo Alto or other next-generation firewalls? Explain how you troubleshoot firewall rules, NAT, routing, and IPsec connectivity.
• End-to-End Security Ownership: Describe a security issue you independently resolved involving Zscaler, firewalls, network traffic, and log analysis..