Network & VPN Engineer

Job highlights

• 3-6 years hands-on experience with ZScaler ZPA, ZIA, ZCC, ZDX and Azure Remote Access VPN; skilled in Kusto Query Language and Azure Sentinel Log Analytics
• Design, deploy, and support Zscaler cloud infrastructure; manage ZPA and client deployment; migrate VPN policies to cloud; implement automation and CI/CD pipelines using Terraform and Azure DevOps; configure Azure networking and security services

Job Summary

Shift Timings: Rotational Shift (Morning - 6:30 to 3, Afternoon - 2 to 10:30 PM IST) (3 days WFO is mandate, but eventually it will change based on business requirement)

Project Overview

The Remote Access VPN team is looking for an individual within depth understanding and hands on experience with Azure Remote Access VPN and ZScaler ZPA, ZIA, ZCC, ZDX solution. Emphasis for this position will be to support BAU operations for Remote VPN and as needed also support implementation projects, architectural design changes, hardening and security practices. This individual will also review and test current documented process procedures and provide recommendations for enhancements.

Contractors Role

• Being the point of contact within ZPA and Azure Engineering & Operations team to oversee the delivery of all entitled services in this offering
• Should be comfortable with building customized queries in KQL with Azure Sentinel Log Analytics.
• Troubleshooting issues on ZPA, ZIA, ZCC, ZDX, Azure VPN, P2S, S2S, ExpressRoute, Conditional Access Policy, Azure Firewalls
• Providing technical evaluation of ZPA and Azure VPN and its interoperability with other systems
• Work with different Internal team for Planning and Implementing BAU changes adhering to the change management process
• Define and implement the configuration of Azure infrastructure and services based on the Enterprise Scale reference architecture
• Implement the security architecture to ensure data security at rest and in transit for PAAS and IAAS services

Qualifications

Any Graduate

Must have skills

• 3-6years of hands-on experience on ZScaler ZPA, ZIA, ZCC, ZDX, Network Routing, Problem Diagnosis skills.

Nice to Haves

• Terraform, Kusto Query Language, Azure Sentinel Log Analytics, Azure Conditional access, Illumio, Fore scout, Network Security, Silver Peak SD-WAN, Azure PAAS, Azure Remote VPN, Azure Virtual WAN, Azure Networking.

Certifications

• EDU 200 (Good to have)

Tasks & Responsibilities

• Designing, deploying, and supporting Zscaler Cloud based Infrastructure across various Data Centers and Disaster Recovery environments
• Manage and configure ZPA, manage Zscaler client deployment
• Migrating the policies from on premise VPN Solution to Cloud Based ZPA service in tandem with various application owners.
• Hands-on experience with Azure DevOps CI/CD pipeline to deploy infrastructure and service with Terraform and/or Arm Template
• Hands-on experience in the designing and deploying Automation and CI/CD for Azure Cloud infrastructure and services
• Azure Solution Deployment - Networking (VNET, NSG, Hub and Spoke, Express Route, VPN, UDR)
• Azure Solution Deployment - Services (Load Balancers, highly available Virtual Network)
• Azure Solution Deployment - Security (NSG, Firewalls)
• Infrastructure as Code familiar - terraform and deployment Automation, experience in coding in terraform including the creation of scripts, managing roles and inventories
• Microsoft Azure, Azure Sentinel Log Analytics, Microsoft Defender.
• Exposure with checkpoint firewalls.
• A security-minded individual and ability to responsibly use administrative access
• Strong network troubleshooting experience - Familiarity with tools such as Ping, Traceroute, MTR, and Network Protocol Analyzers such as tcp, dump, Wireshark
• Define and Implement monitoring using Azure Monitor, Azure Application Insights and Log Analytics Workspace.
• Define and implement Azure policies
• Work with the automation team on the Azure landing zone deployment with Terraform
• Creating and updating the Terraform Template for Azure service.