L3 Onsite Network Engineer

Must Have Technical/Functional Skills

Very strong knowledge on routing, switching, network security protocols especially Zscaler VPN solution, Palo alto, Aruba, CISCO switches, Panorama, Zscaler (ZCC and ZPA)

• Design and implement high-performance, secure, and scalable network solutions that meet business requirements.
• Plan and execute network upgrades, expansions, and optimizations to support growth and technological advancements.
• Develop and maintain network architecture diagrams, documentation, and standard operating procedures.
• Monitor, manage, and maintain the network infrastructure, ensuring optimal performance and minimal downtime.
• Implement and manage network monitoring tools and systems to proactively identify and resolve issues.
• Perform regular network maintenance tasks, including updates, patches, and configuration changes.
• Diagnose and resolve complex network issues related to connectivity, performance, and security.
• Provide third-tier support for network-related incidents, collaborating with other IT teams as needed.
• Analyze network traffic and performance metrics to identify bottlenecks, inefficiencies, and security risks.
• Implement and maintain robust network security measures, including firewalls, VPNs, and intrusion detection/prevention systems.
• Conduct regular security audits, vulnerability assessments, and risk management activities.
• Ensure compliance with industry standards and organizational security policies.
• Lead or participate in network-related projects, ensuring timely delivery and alignment with business goals.
• Collaborate with cross-functional teams to design and implement network solutions that support new applications, services, and technologies.
• Validate ZCC agent status (running, enrolled, service health)
• Business–critical app blocked (URL category, blacklist) – Troubleshooting from VPN perspective
• SSL Inspection exceptions (bypass specific domains)
• URL category updates (reclassification)
• Allow/block list changes (domain or URL) in Zscaler
• ZIA Firewall / Cloud App Controls (if licensed: L7 firewall rules, app control)
• Threat protection controls (ZIA IPS, malware, sandboxing)
• Performance / slowness (latency, DNS, routing, tunnel issues)
• Routing / DNS problems
• WAN / ISP issues (circuit, upstream problems)
• VPN/ZCC coexistence (split tunneling, routing overlap)
• ZCC install/uninstall
• ZCC corruption / agent malfunction troubleshooting
• EDR/AV conflicts with ZCC troubleshooting
• Zscaler tunnel management (GRE/IPSec health, failover)
• Zscaler PAC file management (ruleset updates, hosting, troubleshooting)
• ZIA admin policies (device posture, app segmentation, identity rules)
• Identity / SSO integration (Azure AD, SCIM, user attributes)
• Role-based admin access (RBAC roles, Zscaler admin privileges)
• Zscaler TAC engagement (support tickets, troubleshooting escalations)
• ZIA release management (client connector upgrades, feature adoption)
• Zscaler reporting/dashboarding (usage, SSL, threat, performance)
• ZIA capacity & performance monitoring (tunnel load, DC selection)
• Escalation to SOC (filtering-related)
• Escalation to IT Ops (infrastructure/platform-related)
• Policy/exception/risk approvals (SSL, access exceptions)
• Stay up-to-date with the latest networking technologies, trends, and best practices.
• Identify opportunities to improve network performance, security, and reliability.
• Education:
  
  Bachelor’s degree in Computer Science, Information Technology, or a related field. Advanced certifications (e.g., CCNP, CCIE, or equivalent) are highly desirable.

Very strong knowledge on routing, switching, network security protocols especially Zscaler VPN solution, Palo alto, Aruba, CISCO switches, Panorama, Zscaler (ZCC and ZPA)

• Design and implement high-performance, secure, and scalable network solutions that meet business requirements.
• Plan and execute network upgrades, expansions, and optimizations to support growth and technological advancements.
• Develop and maintain network architecture diagrams, documentation, and standard operating procedures.
• Monitor, manage, and maintain the network infrastructure, ensuring optimal performance and minimal downtime.
• Imple…