Senior Infrastructure Security Engineer - Zscaler Internet and Private Access

At EY, you’ll have the chance to build a career as unique as you are, with the global scale, support, inclusive culture and technology to become the best version of you. And we’re counting on your unique voice and perspective to help EY become even better, too. Join us and build an exceptional experience for yourself, and a better working world for all.

Infra Security - Zscaler_Senior

Key Responsibilities:

• Design, implement, and manage Zscaler Internet Access (ZIA) and Zscaler Private Access (ZPA) solutions within enterprise environments.
• Configure and maintain security policies, including URL filtering, firewall rules, SSL inspection, sandboxing, and Data Loss Prevention (DLP) within ZIA.
• Implement and manage ZPA application access policies based on Zero Trust principles, including application segmentation and user/group-based access.
• Support VPN-less remote access for users, applications, and data centers.
• Integrate Zscaler with identity providers such as Azure AD/Entra ID, Okta, and LDAP for authentication and authorization.
• Deploy and manage the Zscaler Client Connector across various endpoints, including Windows, macOS, and mobile devices.
• Monitor and analyze security logs, traffic, and alerts to identify and respond to potential threats.
• Troubleshoot connectivity, access, and performance issues related to ZIA and ZPA.
• Assist in migrating from legacy VPNs, firewalls, and proxies to Zscaler cloud security solutions.
• Collaborate with network and infrastructure teams to onboard on-premises and cloud applications (AWS, Azure, GCP) to ZPA.
• Support change management processes, incident response efforts, and root cause analysis.
• Maintain technical documentation, standard operating procedures (SOPs), and network/security diagrams.
• Participate in security audits, compliance reviews, and vulnerability assessments.
• Stay updated on Zscaler platform enhancements, features, and industry best practices.

Preferred Requirements:

• Over 3 years of experience in Infrastructure Security, Network Security, or Cloud Security.
• Strong hands-on experience with Zscaler ZIA and ZPA solutions.
• Solid understanding of Zero Trust Architecture, Secure Access Service Edge (SASE), and cloud-delivered security models.
• In-depth knowledge of networking fundamentals, including TCP/IP, DNS, routing, firewalls, and proxies.
• Experience with SSL/TLS inspection and certificate management.
• Familiarity with public cloud platforms such as AWS, Azure, and GCP.
• Experience integrating Zscaler with Security Information and Event Management (SIEM) or Security Operations Center (SOC) tools (e.g., Splunk, Microsoft Sentinel, QRadar).
• Knowledge of authentication protocols, including SAML, OAuth, and Multi-Factor Authentication (MFA).
• Exposure to Data Loss Prevention (DLP), Cloud Access Security Broker (CASB), and advanced threat protection concepts.
• Experience with automation or scripting languages (e.g., PowerShell, Python, REST APIs) is a plus.

Relevant Certifications Preferred:

• Zscaler Certified Cloud Professional (ZCCP)
• CCNA / CCNP Security
• Cloud security certifications (e.g., AZ-500, AWS Security Specialty)
• Strong analytical, troubleshooting, and communication skills.
• Ability to work effectively in a 24/7 enterprise infrastructure environment.

EY | Building a better working world

EY exists to build a better working world, helping to create long-term value for clients, people and society and build trust in the capital markets.

Enabled by data and technology, diverse EY teams in over 150 countries provide trust through assurance and help clients grow, transform and operate.

Working across assurance, consulting, law, strategy, tax and transactions, EY teams ask better questions to find new answers for the complex issues facing our world today.