GMS Senior Zscaler ZPIA

At EY youll have the chance to build a career as unique as you are with the global scale support inclusive culture and technology to become the best version of you. And were counting on your unique voice and perspective to help EY become even better too. Join us and build an exceptional experience for yourself and a better working world for all.

Infra Security - ZscalerSenior

Key Responsibilities:

• Design implement and manage Zscaler Internet Access (ZIA) and Zscaler Private Access (ZPA) solutions within enterprise environments.
• Configure and maintain security policies including URL filtering firewall rules SSL inspection sandboxing and Data Loss Prevention (DLP) within ZIA.
• Implement and manage ZPA application access policies based on Zero Trust principles including application segmentation and user/group-based access.
• Support VPN-less remote access for users applications and data centers.
• Integrate Zscaler with identity providers such as Azure AD/Entra ID Okta and LDAP for authentication and authorization.
• Deploy and manage the Zscaler Client Connector across various endpoints including Windows macOS and mobile devices.
• Monitor and analyze security logs traffic and alerts to identify and respond to potential threats.
• Troubleshoot connectivity access and performance issues related to ZIA and ZPA.
• Assist in migrating from legacy VPNs firewalls and proxies to Zscaler cloud security solutions.
• Collaborate with network and infrastructure teams to onboard on-premises and cloud applications (AWS Azure GCP) to ZPA.
• Support change management processes incident response efforts and root cause analysis.
• Maintain technical documentation standard operating procedures (SOPs) and network/security diagrams.
• Participate in security audits compliance reviews and vulnerability assessments.
• Stay updated on Zscaler platform enhancements features and industry best practices.

Preferred Requirements:

• Over 3 years of experience in Infrastructure Security Network Security or Cloud Security.
• Strong hands-on experience with Zscaler ZIA and ZPA solutions.
• Solid understanding of Zero Trust Architecture Secure Access Service Edge (SASE) and cloud-delivered security models.
• In-depth knowledge of networking fundamentals including TCP/IP DNS routing firewalls and proxies.
• Experience with SSL/TLS inspection and certificate management.
• Familiarity with public cloud platforms such as AWS Azure and GCP.
• Experience integrating Zscaler with Security Information and Event Management (SIEM) or Security Operations Center (SOC) tools (e.g. Splunk Microsoft Sentinel QRadar).
• Knowledge of authentication protocols including SAML OAuth and Multi-Factor Authentication (MFA).
• Exposure to Data Loss Prevention (DLP) Cloud Access Security Broker (CASB) and advanced threat protection concepts.
• Experience with automation or scripting languages (e.g. PowerShell Python REST APIs) is a plus.

Relevant Certifications Preferred:

• Zscaler Certified Cloud Professional (ZCCP)
• CCNA / CCNP Security
• Cloud security certifications (e.g. AZ-500 AWS Security Specialty)
• Strong analytical troubleshooting and communication skills.
• Ability to work effectively in a 24/7 enterprise infrastructure environment.

EY Building a better working world

EY exists to build a better working world helping to create long-term value for clients people and society and build trust in the capital markets.

Enabled by data and technology diverse EY teams in over 150 countries provide trust through assurance and help clients grow transform and operate.

Working across assurance consulting law strategy tax and transactions EY teams ask better questions to find new answers for the complex issues facing our world today.