Zscaler SSE Expert and Service Owner - Freelance

Context

The Group IT department is organized around Shared Line of Services (SLS) to deliver global services to all group entities.

SLS infrastructure delivers Cloud Service Provider based services (AWS and Azure) and centrally managed Network services (Backbone, Site-to-site VPN, internet access filtering, VPN access for end users, IPAM, SDWAN solution).

Within the SLS Infrastructure, the Network & Security SSE Expert will be a member of the Engineering team, responsible for designing, deploying, and maintaining new service offers based on high-end market solutions. As product owner of these services, the expert will conduct RFPs to select the most appropriate technical solutions for network infrastructure services, ensuring smooth integration into the IT information system. The expert will design the solution and define the corresponding service offer within the SLS infrastructure service catalog.

Achieving a scalable design that respects corporate standards and cybersecurity rules, and transitioning the service to operations within the Side Partner operations team, is mandatory to operate at scale.

The expert will also ensure technologies are updated according to vendor lifecycles and that vulnerabilities are addressed within deadlines required by Cyber teams.

They will ensure proper service health monitoring through existing monitoring solutions and that service consumption can be charged back to customers.

Customers should be able to raise service and support requests modeled by the product owner in the ITSM solution.

Finally, the expert will handle support escalations from the Operations Team with necessary vendor assistance.

Missions

• Define Network & Security around SSE Solution Zscaler
• Conduct RFPs to select the right technology
• Produce KPIs based on delivered services
• Maintain the product lifecycle
• Ensure level 3 support with vendor escalation when required
• Ensure proper transition of run activities to operational teams
• Define service monitoring, backup, service request, and support escalation paths
• Contribute to the billing and chargeback model applied to customers
• Ensure standards and cybersecurity rules are respected
• Interact with necessary stakeholders to define, budget, design, build, maintain, monitor, backup, report, support, and charge services back to customers

Main Activities

• Become Product Owner of SLS infrastructure services
• Design and maintain Network and Security services
• Respect cybersecurity requirements for service design
• Ensure transition to operations of the services
• Ensure proper level of backup
• Define monitoring rules and ensure proper monitoring
• Assume level 3 support on the services
• Contribute to cost optimization of managed services
• Arrange webinars on major feature updates and changes
• Deliver automation-driven services
• Ensure proper documentation (ISO 27001)
• Create KPI dashboards for services
• Present feature availability, updates, or improvements to the Design Authority and Architecture Review Board
• Contribute to security audits, risk assessments, pentests, and remediation

Deliverables (ISO 27001)

• High-Level Design (HLD)
• Low-Level Design (LLD)
• Standard Operating Procedures (SOP)
• KPI Dashboards
• Root Cause Analysis (RCA)

Experience and Education

• 5 years of higher education (computer engineering degree or equivalent)
• At least 5 years of experience in an equivalent position in a company of similar size
• Experience managing vendor contracts

Tools & Environment

• ISO27001 knowledge
• Operating systems: Windows, Linux Redhat
• Network Access Control (NAC) solutions (Cisco ISE) — basic knowledge
• Routing & Switching (Juniper, Cisco, Meraki) — basic knowledge
• Network, security, and SSE technologies
• Automation capabilities
• Public cloud hosting infrastructures (AWS and/or Azure)
• Site-to-site VPN (Fortinet, Cisco)
• WiFi solutions (Cisco Meraki, Juniper) — basic knowledge
• Cloud-based Internet Access and Private Access (Zscaler ZIA & ZPA)
• SD WAN solutions (Cisco Catalyst, Cisco Viptela) — basic knowledge
• Firewalling (Fortinet, Cisco, Palo Alto)
• English language proficiency