L3 Engineer

- Design and implement Zscaler solutions by architecting and deploying Zscaler Internet Access (ZIA) and Zscaler Private Access (ZPA) solutions to secure internet-bound and internal application traffic. - Integrate Zscaler services with enterprise infrastructure like identity providers, SIEM platforms, firewalls, and endpoint security tools to implement a zero-trust framework. - Manage Zscaler configurations, including policy setup, app connectors, authentication profiles, and access control to ensure secure and consistent connectivity. - Monitor and troubleshoot network traffic by analyzing logs, optimizing Zscaler deployments for reliability and low latency, and resolving performance or access issues. - Collaborate with security teams to align Zscaler policies with compliance requirements, assist in audits, and support incident response processes. - Administer Microsoft Entra ID by managing user and group lifecycle, directory synchronization, and role-based access control (RBAC) to enforce least privilege access across Azure resources. - Configure Single Sign-On (SSO) for enterprise applications, integrating with protocols like SAML, OAuth, and OpenID Connect for seamless and secure user access. - Implement Azure Privileged Identity Management (PIM) to control and monitor just-in-time (JIT) privileged access, approval workflows, and time-bound assignments for critical roles. - Manage identity governance by designing and managing Access Packages and entitlement workflows to streamline access requests, approvals, and reviews. - Create conditional access policies to enforce Multi-Factor Authentication (MFA) and conditional access based on contextual signals (e.g., user risk, device compliance, and location).