Role Summary

The Zscaler ZIA & ZPA Implementation SME (B2/B3) is responsible for end-to-end delivery of Zscaler Internet Access (ZIA) and Zscaler Private Access (ZPA) implementations. The role covers all phases of the implementation lifecycle including Design, Build, Pilot Testing, Hypercare, and Production Rollout. The resource will work closely with customers, internal architects, project managers, and OEM/vendor teams to ensure successful and stable deployments.

Key Responsibilities:

Design & Architecture

Act as SME for Zscaler ZIA & ZPA implementation projects
Understand current customer network, security, and identity architecture
Prepare and review High Level Design (HLD) and Low Level Design (LLD) documents
Conduct design workshops and technical discussions with stakeholders
Define standards, naming conventions, and best practices

Build & Configuration

Configure Zscaler ZIA components (URL filtering, firewall, SSL inspection, authentication)
Configure Zscaler ZPA components (App Connectors, Application Segments, Access Policies)
Integrate Zscaler with Azure AD / Entra ID using SAML and SCIM
Configure traffic forwarding (GRE/IPSec, Client Connector)
Configure log streaming and SIEM integrations

Pilot & Testing

Plan and execute ZIA & ZPA pilot rollouts
Validate agent deployment and policy enforcement
Perform testing and troubleshooting during pilot phase
Capture risks, issues, and lessons learned

Production Rollout & Hypercare

Support phased production rollout
Provide post-go-live hypercare support
Troubleshoot connectivity, access, and performance issues • Work with OEM/vendor support teams as required

Documentation & Handover

Prepare As-built documents, SOPs, and runbooks
Support knowledge transfer to BAU / Managed Services teams
Ensure proper documentation and audit readiness

Required Skills

Strong hands-on experience with Zscaler ZIA & ZPA
Experience with Zscaler Client Connector, GRE/IPSec tunnels
Knowledge of Azure AD, SAML, SCIM, MFA
Strong networking and security fundamentals
Experience with firewall technologies (Palo Alto, Check Point, Cisco preferred)

Soft Skills

Strong communication and stakeholder management skills
Ability to work independently and take ownership
Experience working with global customers and teams

Certifications (Preferred)
⚫ Zscaler Certified Cloud Administrator (ZIA / ZPA)

Zscaler Certified Professional
Azure / Network Security certifications

Senior Zscaler ZIA/ZPA Engineer