Back to all jobs
Visible on IKONS todayNewPopular
HainautHybridHours negotiable<3months
As part of a migration to Zscaler ZIA and ZPA, you will design the target architecture, produce the necessary documentation, and implement a pilot.
- The mission aims to accelerate the transition from a current remote access solution to a Zero Trust platform, while supporting internal teams with support, knowledge transfer, and training.
- The environment includes constraints related to Azure Entra ID, Intune, mobile devices, telephony, critical business applications, and SIEM integration.
What you do
- Design the target architecture for ZIA and ZPA.
- Draft all architecture and operational documentation.
- Define and implement the technical Zscaler components.
- Prepare the migration of VPN accesses to ZPA.
- Prepare and support the ZIA migration.
- Identify possible optimizations of the Zscaler tenant.
- Support technical teams during the design and pilot phases.
Scope of the assignment. Architecture & Design.
- Analyze the existing situation and define the target architecture.
- Analyze existing ZIA configurations and VPN usage.
- Identify applications used via VPN and map associated network flows.
- Identify technical and organizational dependencies.
- Define ZIA, ZPA, App Connectors architectures and, if applicable, a private Service Edge.
- Integrate with Azure Entra ID, SCIM, SIEM, and Intune.
- Consider BYOD strategy and mobile devices.
- Study telephony impacts, bidirectional flows, bypass mechanisms, as well as performance and latency constraints.
Documentation.
- Produce complete technical and operational documentation.
- Architecture documents: HLD, LLD, and DAT.
- Documentation covering ZIA, ZPA, Entra ID, SCIM, App Connectors, Service Edge, SIEM integration, and CMDB modeling.
- Operational documents: support procedures, troubleshooting guides, failover procedures, migration procedures, and operational documentation level 1 to 3.
- Create and monitor the operational and technical documentation of the systems.
ZIA Implementation.
- Analyze an existing tenant or set up a new tenant.
- Define the migration strategy and configure the tenant.
- Configure authentication with Azure Entra ID and implement SCIM provisioning.
- Migrate existing configurations and validate network security policies and GRE tunnels.
- Implement the transparent proxy and validate explicit proxy configurations.
- Integrate with SIEM and define the log collection strategy, verify proper event routing.
ZPA Implementation.
- Deploy the ZPA infrastructure and App Connectors.
- Set up high availability and validate capacity and performance.
- Perform reverse engineering of applications currently accessible via VPN (SAP, OpenScape, Follow-Me Printing, RDP environments, etc.).
- Identify FQDNs, wildcard domains, and application dependencies.
- Define App Segments.
- Prepare and migrate populations: Windows 11 workstations, laptops, OT environments if applicable, external providers, Android devices, and smartphones.
Migration, support, and knowledge transfer.
- Prepare the UAT environment and organize and execute the pilot migration.
- Functionally validate and define the deployment strategy in waves.
- Facilitate knowledge transfer sessions and train operational and support teams.
- Provide startup support and accompany internal technical teams.
Expected deliverables.
- HLD ZIA/ZPA
- LLD ZIA/ZPA
- DAT ZIA/ZPA
- Azure Entra ID / SCIM Architecture
- App Connectors Design
- Service Edge Design
- ZPA Application Catalog
- Flow and Dependency Mapping
- ZIA Migration Plan
- VPN to ZPA Migration Plan
- Operational Guides
- Support Procedures
- Knowledge Transfer File
- Pilot Report and Recommendations
Profile
- ZDTE certification or higher.
- Confirmed expertise in network security.
- Solid experience with Zscaler, particularly ZIA and ZPA.
- Participation in a similar migration project to Zscaler.
- Experience in producing and monitoring operational and technical system documentation.
- Ability to mentor, train, and upskill technical teams.
How to apply
View the full assignment text and application details once your tailored application is ready.
Order a tailored application to view the full assignment and application details.
More context, less searching.
You get enough context to judge whether this job is relevant. The full brief, client details and next steps stay available inside the app.