Country/Region:  US
Requisition ID:  36924
Work Model:  Hybrid
Position Type:  Contract
Salary Range: 
Location:  US - NJ - BIRLASOFT OFFICE

Title:  Contractor

Description: 

Area(s) of responsibility

Job Description – Security Analyst (Zero Trust & Zscaler)

This role is ideal for a security professional experienced in implementing Zero Trust strategies, managing Zscaler Private Access solutions, and securing enterprise application access through identity-driven security controls.

Position: Security Analyst – Zero Trust Security
Location: Flexible / Hybrid / Onsite - NYC - NY

Key Responsibilities

  • Configure, administer, and maintain Zscaler Private Access (ZPA) environments.
  • Design and implement Zero Trust access policies based on user identity, device posture, application sensitivity, and business requirements.
  • Profile and analyze user access patterns to ensure least-privilege access and reduce security risks.
  • Create, modify, and optimize access control policies for internal applications and services.
  • Collaborate with Identity and Access Management (IAM) teams to integrate authentication and authorization controls.
  • Monitor ZPA logs, user activities, and security events to identify anomalies and potential threats.
  • Troubleshoot user connectivity and access issues within Zscaler environments.
  • Conduct periodic reviews of access permissions and recommend policy improvements.
  • Support security audits, compliance initiatives, and risk assessments related to access management.
  • Develop and maintain documentation for ZPA configurations, policies, and operational procedures.
  • Work closely with network, infrastructure, and application teams to onboard applications into the Zero Trust framework.

Required Skills

  • Strong experience with Zscaler Private Access (ZPA) administration and policy configuration.
  • Good understanding of Zero Trust Architecture (NIST 800-207) principles and implementation.
  • Experience profiling users, applications, and access requirements to build secure access policies.
  • Knowledge of Identity Providers (IdPs) such as:
    • Microsoft Entra ID (Azure AD) / Okta
    • Ping Identity
    • ADFS
  • Experience with authentication technologies including:
    • SAML
    • OAuth
    • OpenID Connect (OIDC)
    • Multi-Factor Authentication (MFA)
  • Understanding of networking concepts including DNS, TCP/IP, VPN, SSL/TLS, and application connectivity.
  • Experience with security monitoring, log analysis, and incident investigation.
  • Familiarity with SIEM platforms such as Splunk, Microsoft Sentinel, or QRadar.

Preferred Qualifications

  • Experience with additional Zscaler products such as:
    • Zscaler Internet Access (ZIA)
    • Zscaler Digital Experience (ZDX)
    • Zscaler Client Connector
  • Knowledge of cloud security concepts across AWS, Azure, or GCP.
  • Experience with Privileged Access Management (PAM) solutions.
  • Relevant certifications:
    • Zscaler Certified Administrator (ZCCA) / Zscaler Certified Professional (ZCCP)
    • Security+

Key Competencies

  • Zero Trust Architecture
  • Zscaler Private Access (ZPA)
  • Identity & Access Management
  • Access Policy Management
  • User Access Profiling
  • Security Monitoring & Analysis
  • Risk Assessment & Compliance
  • Incident Investigation & Troubleshooting