Zscaler Zero Trust Architect

Led the end-to-end design, implementation, migration, and operational transition of Zscaler ZIA, ZPA, and ZDX solutions for a global enterprise environment, taking ownership from requirements gathering and architecture through deployment, testing, production rollout, and post-implementation support. Architected and led the implementation of the Zero Trust Network Access (ZTNA) framework, replacing traditional network-access models with application-centric access controls and segmentation strategies to provide secure remote access based on user identity, device posture, and application requirements. Designed and implemented Zscaler security controls, including SSL/TLS Inspection, URL Filtering, DNS Security, Cloud Firewall, DLP, Browser Isolation, and Advanced Threat Protection, aligned with enterprise security and compliance requirements. Led Zscaler traffic-forwarding implementation and migration, configuring Client Connector, PAC files, GRE tunnels, and IPSec tunnels, while validating routing, authentication, traffic flows, policy enforcement, and failover scenarios during production rollout. Designed and implemented Zscaler identity integrations with Microsoft Entra ID/Azure AD and Okta using SAML SSO, MFA, SCIM, and identity-based user/group mapping, enabling centralized authentication and granular security-policy enforcement. Led ZPA application onboarding and segmentation, designing Application Segments, App Connector Groups, App Connectors, and Access Policies to provide least-privilege access to private applications without exposing internal applications to the public Internet. Managed ZDX implementation and digital experience monitoring, establishing visibility into endpoint, network, application, and user-experience performance to proactively identify and troubleshoot enterprise connectivity issues. Coordinated end-to-end implementation activities across network, security, cloud, infrastructure, identity, and endpoint teams, driving technical workshops, dependency resolution, implementation planning, testing, change management, and production cutover. Led migration from legacy proxy/security infrastructure to Zscaler. developing migration strategies, validating application and traffic dependencies, executing phased rollouts, and minimizing business disruption during the transition. Owned L3 troubleshooting and incident response during and after implementation, performing packet-level analysis, Zscaler logs and policy investigation, traffic-flow analysis, root-cause analysis, and coordinating with cross-functional and vendor teams for complex issues. Successfully drove the Zscaler implementation project through completion. including architecture, configuration, integration, UAT, production deployment, stabilization, documentation, knowledge transfer, and operational handover.

- Managed enterprise cloud proxy and secure internet access environments by configuring traffic routing and enforcing access control policies. - Monitored web traffic and analyzed security logs to detect and investigate security incidents, ensuring secure and reliable application access. - Administered firewall rules, access controls, and network segmentation policies to maintain secure connectivity for remote users. - Conducted traffic analysis, packet capture investigations, and authentication troubleshooting to promptly resolve connectivity issues. - Collaborated with application, infrastructure, and security teams to facilitate secure deployment of business-critical applications. - Documented security procedures, troubleshooting workflows, and operational processes to ensure compliance and improve knowledge management.

- Led L3 engineering, deployment, administration, and operational support of Zscaler Internet Access (ZIA), Zscaler Private Access (ZPA), and Zscaler Digital Experience (ZDX) solutions across complex enterprise environments. - Designed and implemented Zero Trust access policies, application segmentation strategies, connector deployments, and secure remote access architectures to enhance security posture and enforce granular access control. - Managed comprehensive security controls, including SSL inspection, URL filtering, Cloud Firewall, threat protection, PAC file management, file type control, and identity integrations with Azure AD, ADFS, and SAML-based authentication platforms. - Developed Python automation scripts for log analysis, troubleshooting, and routine operational tasks, significantly increasing operational efficiency and reducing manual workload within security operations. - Collaborated with Zscaler Technical Account Managers (TAMs), infrastructure teams, and business stakeholders to deliver critical security projects, platform upgrades, and ongoing service optimizations. - Executed incident response, conducted root cause analysis, performed vulnerability assessments, compliance audits, and advanced troubleshooting to ensure high service availability and strengthen overall organizational security.

- Administered and supported Zscaler Internet Access (ZIA), Zscaler Private Access (ZPA), and Zscaler Digital Experience (ZDX) solutions within enterprise environments, ensuring robust security and seamless user connectivity. - Designed and implemented Zero Trust access policies and application segmentation to enhance security posture and enforce strict access control. - Established secure remote connectivity solutions, enabling reliable and safe access for remote users. - Managed critical security controls including SSL inspection, URL filtering, threat prevention, and integrated identity solutions with Azure AD, ADFS, and SAML authentication platforms. - Troubleshot and resolved complex authentication, connectivity, and application access issues by collaborating closely with Zscaler Technical Account Managers (TAMs), infrastructure teams, and business stakeholders. - Conducted incident response, root cause analysis, compliance audits, and security assessments to improve platform reliability, enhance performance, and optimize user experience. - Contributed to cloud security, identity management, and enterprise access initiatives, driving operational excellence, fostering knowledge sharing, and promoting continuous security enhancements.

- Managed enterprise network infrastructure, including switching, routing, and LAN/WAN operations across multiple sites to ensure optimal performance and reliability. - Executed network installation, maintenance, troubleshooting, and infrastructure upgrades to enhance network stability and scalability. - Coordinated with vendors and ISPs for network deployment, circuit provisioning, and prompt resolution of service-related issues. - Supported network operations by resolving incidents swiftly and maintaining comprehensive infrastructure documentation for reference and compliance.