Vpn Engineer

Project Overview: The Laptop remote connect team is looking for an individual with an in-depth knowledge of Remote Access VPN Engineering with hands on experience with Azure VPN and  ZScaler ZPA solution. Emphasis for this position will be on VPN implementation, architectural design changes, hardening, security practices and BAU support. This individual will also review and test current documented process procedures and provide recommendations for enhancements.

Role:

• Being the point of contact within ZScaler Private Access and Azure VPN to oversee the delivery of all entitled services in this offering
• Providing technical evaluation of the ZScaler ZPA and Azure VPN  deployment and its interoperability with other systems and Applications
• Troubleshooting issues on Azure VPN, P2S, S2S, ExpressRoute, Conditional Access Policy, Azure Firewalls
• Work with different Internal team for Planning and Implementing BAU changes adhering to the change management process
• Define and implement the configuration of Azure infrastructure and services based on the  Enterprise Scale reference architecture
• Implement the security architecture to ensure data security at rest and in transit for PAAS and IAAS services
• Should be comfortable with building customized queries in KQL with Azure Sentinel Log Analytics.

Experience Level: L3 6-10 years

Qualifications: B.E/B. Tech preferred OR any graduate

Must have skills: ZScaler ZPA/ZCC/ZTNA/ZDX, Azure Networking, Azure Firewall, Azure Virtual WAN, Azure PaaS, Azure Remote VPN, Terraform, Kusto Query Language, Azure Conditional access, Azure Sentinel Log Analytics, Network Routing, Problem Diagnosis skills and DevOps.

Nice to Haves: Network Security,

Tasks & Responsibilities

• Hands-on experience with deploying ZScaler ZPA/ZDX/ZTNA technologies.
• Manage and configure ZPA, ZDX, ZTNA. Manage Zscalar client deployment
  Migrating the policies from on premise VPN Solution to Cloud Based ZPA service in tandem with various application owners.
• Hands-on experience with Azure DevOps CI/CD pipeline to deploy infrastructure and service using Terraform and/or Arm Template.
• Define and implement the configuration of Azure infrastructure and services based on the Enterprise Scale reference architecture (including Hub & Spoke architecture).
• Hands-on experience in the designing and deploying Automation and CI/CD for Azure Cloud infrastructure and services using ADO and Github.
• Azure Solution Deployment - Networking (VNET, NSG, Hub and Spoke, Express Route, VPN, UDR)
• Azure Solution Deployment - Services (Load Balancers, highly available Virtual Network)
• Azure Solution Deployment - Security (NSG, Firewalls)
• Infrastructure as Code familiar - Terraform and deployment Automation, experience in coding in Terraform including the creation of scripts, managing roles and inventories.
• Exposure with checkpoint firewalls.
• Azure Sentinel Log Analytics, Microsoft Defender.
• A security-minded individual and ability to responsibly use administrative access.
• Strong network troubleshooting experience - Familiarity with tools such as Ping, Traceroute, MTR, and Network Protocol Analyzers such as TCP dump, Wireshark
• Designing, deploying, and supporting Zscaler Cloud based Infrastructure across various Data Centers and Disaster Recovery environments
• Define and Implement monitoring using Azure Monitor, Azure Application Insights and Log Analytics Workspace.
• Define and implement Azure policies via Policy as Code (PaC).
• Work with the cloud platform and automation team on the Azure landing zone deployment with Terraform
• Creating and updating the Terraform Template for Azure service.