Description
**Capital Empresarial Horizonte, a Mexican company specializing in Human Resources and Information Technologies, is seeking:**
Zscaler Platform Administrator
**Conversational English required**
* **Availability to work in Querétaro, CDMX, Guadalajara, and/or Monterrey**
* **3 days on-site \- 2 days remote**
**Technical Requirements:**
* Bachelor's or Engineering degree in Systems, Information Technologies, Networking, Cybersecurity, or related field.
* Minimum 5 years of experience in networking, security, or secure access platform administration.
* Proven experience in advanced (L3\) implementation and support of Zscaler.
* Experience leading critical incidents and infrastructure or security projects.
* Solid experience with Zscaler (ZIA, ZPA).
* Advanced knowledge of networking (proxies, GRE/IPsec tunnels, DNS, TCP/IP).
* Experience in advanced troubleshooting (logs, packet capture, debug).
* Management of security and access policies in enterprise environments.
**Key Responsibilities:*** Monitor Zscaler platform dashboards, alerts, and performance.
* Administer and optimize ZIA, ZPA, and additional modules (e.g., ZDX).
* Design, implement, and manage security and access policies.
* Validate connectivity for new users and locations (ping, traceroute, logs).
* Address and resolve issues related to web access, SSL inspection, and performance.
* Install, configure, and update Zscaler Client Connector (ZCC).
* Configure and maintain forward proxy, as well as GRE/IPsec tunnels.
* Analyze advanced logs, packet captures, and proxy traces for troubleshooting.
* Adjust policies based on business needs and usage analysis.
* Manage false positives/negatives in web and cloud application categorization.
* Coordinate with Zscaler support for escalations and resolution of complex issues.
* Participate in Change Advisory Board (CAB) meetings for planned changes and conduct configuration audits.
* Lead critical incidents (Sev1\) and coordinate resolution with cross-functional teams.
* Design architectural improvements and high-impact platform changes.
* Lead projects such as application segmentation (ZPA), regional deployments, and migrations from traditional proxies.
* Perform capacity planning (bandwidth, logs, licenses).
* Drive automation via scripts and Infrastructure-as-Code (IaC).
* Create and maintain technical documentation, runbooks, and troubleshooting guides.
* Mentor and provide technical support to L1/L2 teams.
* Review security posture (SSL inspection, DLP, compliance).
**Desirable Qualifications:**
* Experience with ZDX or other Zscaler modules.
* Knowledge of cloud security and Zero Trust architecture.
* Experience in automation (scripts, APIs, IaC).
* Experience migrating from traditional proxies to cloud-based solutions.
**We Offer:**
* Office working hours
* 100% payroll-based compensation scheme
* Salary open to negotiation based on experience
* Statutory benefits
* Enhanced benefits (SGGM, SV, grocery vouchers, 30-day bonus, PTU)