Zscaler SSE Expert and Service Owner

Context

The Group IT department is organized around Shared Line of Services (SLS) to deliver global services to all group entities.

SLS infrastructure delivers Cloud Service Provider based services (AWS and Azure) and centrally managed Network services (Backbone, Site-to-site VPN, internet access filtering, VPN access for end users, IPAM, SDWAN solution).

Within the SLS Infrastructure, the Network & Security SSE Expert will be a member of the Engineering team, responsible for designing, deploying, and maintaining new service offers based on high-end market solutions. Becoming the product owner of these services, the expert will conduct RFPs to select the most appropriate technical solutions for network infrastructure services, ensuring smooth integration into the IT information system. The expert will design the solution and define the corresponding service offer in the SLS infrastructure service catalog.

Achieving a scalable design respecting corporate standards and cybersecurity rules, and transitioning the service to operations within the Side Partner operations team, is mandatory to operate at scale.

The expert will also ensure technologies used are updated according to vendor lifecycle and that vulnerabilities are addressed within deadlines required by Cyber teams.

They will ensure service health is properly monitored through existing monitoring solutions and that service consumption can be charged back to customers.

Customers should be able to raise service and support requests modeled by the product owner in the ITSM solution.

Finally, the expert will handle support escalations from the Operations Team with necessary assistance from vendors.

Missions

• Define Network & Security around SSE Solution Zscaler
• Conduct RFPs to select the right technology
• Produce KPIs based on delivered services
• Maintain the product lifecycle
• Ensure level 3 support with vendor escalation when required
• Ensure proper transition of run activities to operational teams
• Define service monitoring, backup, service request, and support escalation paths
• Contribute to billing and chargeback models applied to customers
• Ensure standards and cybersecurity rules are respected
• Interact with necessary stakeholders to define, budget, design, build, maintain, monitor, backup, report, support, and charge services back to customers
• Become product owner of SLS infrastructure services
• Design and maintain network and security services
• Respect cybersecurity requirements for service design
• Ensure transition to operations of the services
• Ensure proper level of backup
• Define monitoring rules and ensure proper monitoring
• Assume level 3 support on the services
• Contribute to cost optimization of managed services
• Arrange webinars on major feature updates and changes
• Deliver automation-driven services
• Ensure proper documentation (ISO 27001)
• Create KPI dashboards for services
• Present feature availability, updates, or improvements to the Design Authority and Architecture Review Board
• Contribute to security audits, risk assessments, pentests, and remediation

Deliverables (ISO 27001)

• High-Level Design (HLD)
• Low-Level Design (LLD)
• Standard Operating Procedures (SOP)
• KPI Dashboards
• Root Cause Analysis (RCA)

Tools & Environment

• SSE Solution: Zscaler (ZIA & ZPA)
• Cloud platforms: AWS, Azure
• Network equipment: Juniper, Cisco, Meraki
• Firewall solutions: Fortinet, Cisco, Palo Alto
• SD WAN solutions: Cisco Catalyst, Cisco Viptela
• Operating systems: Windows, Linux Redhat
• Network Access Control (NAC) solution: Cisco ISE (appreciated)
• VPN: Site-to-site VPN (Fortinet, Cisco)
• ITSM solution for service and support requests
• Monitoring and backup tools aligned with ISO 27001 standards

Working Conditions

• Position involves interaction with multi-disciplinary and multi-cultural teams
• Requires strong organizational and coordination skills
• English language proficiency required
• Vendor contract management experience required
• Role includes responsibility for service lifecycle management, support escalation, and cost optimization
• Emphasis on compliance with cybersecurity and corporate standards

1. 5 years of higher education (computer engineering degree or equivalent)
2. At least 5 years of experience in an equivalent position in a company of similar size
3. Experienced in managing Vendor contracts
4. Knowledge in NAC Solution appreciated (Cisco ISE)
5. Ability to automate
6. ISO27001 Knowledge
7. Knowledge in Routing & Switching appreciated (Juniper, Cisco, Meraki)
8. Knowledge of Operating systems (Windows, Linux Redhat)
9. Strong organizational and coordination skills for multi-disciplinary and multi-cultural teams
10. English proficiency
11. Expertise in Cloud based Internet Access and Private Access (Zscaler ZIA & ZPA)
12. Knowledge in Wifi solution (Cisco Meraki, Juniper)
13. Knowledge in Firewalling appreciated (Fortinet, Cisco, Palo Alto)
14. Good knowledge of Network & security & SSE technologies
15. Good knowledge of public cloud hosting infrastructures (AWS or/and Azure)
16. Knowledge in Site to Site VPN appreciated (Fortinet, Cisco)
17. Knowledge in SD WAN Solutions (Cisco Catalyst, Cisco Viptela)