Network Security Automation Engineer

Role Overview: You will be responsible for automating Zscaler Internet Access (ZIA) configuration management, converting proxy PAC files into standardized configurations, and developing Python-based scripts and web admin tools to orchestrate ZIA via API. Your focus will be on reducing direct portal administration, enforcing governance, and maintaining audit-ready change records for regulatory audits. Key Responsibilities: - Design, build, and maintain Python-based automation scripts and web-based admin tools to manage ZIA through Zscaler ZIA APIs. - Implement role-based workflows to reduce reliance on Zscaler portal access and enable controlled changes through internal tools. - Integrate approval workflows and capture audit metadata automatically. - Enforce guardrails to prevent unsafe or non-compliant configurations. - Analyze, consolidate, and convert existing proxy PAC files into standardized, automated configurations. - Establish testing harnesses and regression suites to validate PAC behavior. - Extract and transfer current ZIA portal configuration into the automation tool's data model. - Implement synchronization, versioning, rollbacks, and change logs for configuration management. - Build auditable change records enriched with contextual metadata to meet regulatory expectations. - Own the runbook for automation tools and PAC lifecycle management. - Provide L3 support for automation issues, policy application failures, and PAC anomalies. - Maintain developer and admin documentation, architectural diagrams, API usage guides, and standard operating procedures. Qualifications Required: - Hands-on experience with Zscaler ZIA, including policy management, PAC file expertise, and Python. - Proficiency in Python for automation, web services, and testing. - Experience with web tooling, networking, security fundamentals, DevOps practices, and governance & audit. - Knowledge of data and observability tools. - Strong communication, documentation, and stakeholder management skills. Company Details: (if present in JD) N/A Role Overview: You will be responsible for automating Zscaler Internet Access (ZIA) configuration management, converting proxy PAC files into standardized configurations, and developing Python-based scripts and web admin tools to orchestrate ZIA via API. Your focus will be on reducing direct portal administration, enforcing governance, and maintaining audit-ready change records for regulatory audits. Key Responsibilities: - Design, build, and maintain Python-based automation scripts and web-based admin tools to manage ZIA through Zscaler ZIA APIs. - Implement role-based workflows to reduce reliance on Zscaler portal access and enable controlled changes through internal tools. - Integrate approval workflows and capture audit metadata automatically. - Enforce guardrails to prevent unsafe or non-compliant configurations. - Analyze, consolidate, and convert existing proxy PAC files into standardized, automated configurations. - Establish testing harnesses and regression suites to validate PAC behavior. - Extract and transfer current ZIA portal configuration into the automation tool's data model. - Implement synchronization, versioning, rollbacks, and change logs for configuration management. - Build auditable change records enriched with contextual metadata to meet regulatory expectations. - Own the runbook for automation tools and PAC lifecycle management. - Provide L3 support for automation issues, policy application failures, and PAC anomalies. - Maintain developer and admin documentation, architectural diagrams, API usage guides, and standard operating procedures. Qualifications Required: - Hands-on experience with Zscaler ZIA, including policy management, PAC file expertise, and Python. - Proficiency in Python for automation, web services, and testing. - Experience with web tooling, networking, security fundamentals, DevOps practices, and governance & audit. - Knowledge of data and observability tools. - Strong communication, documentation, and stakeholder management skills. Company Details: (if present in JD) N/A