Network Administrator L3 (Zscaler/SASE) - Team Leader

Job Description:

- Act as the senior technical focal point (C-level) for the Zscaler operations service (ZIA, ZPA, ZDX, legacy VPN, PRA, Browser-based access) of a global customer; ensure the availability, performance and security of the platform.

- Handle complex incidents and changes; perform root cause analysis (RCA) for Priority 1/2 incidents; act as the final escalation point from the L2 team.

- Design, optimize and standardize policies: SSL inspection, advanced threat protection, URL filtering, DLP and firewall policies; optimize traffic forwarding (PAC, IPSec/GRE, Azure VWAN).

- Implement and administer identity/authentication integration (SCIM, SAML) and location management; design and scale VZEN and App Connectors (on ESXi and AWS).

- Manage configuration lifecycle, backup/restore; perform patching and component upgrades; coordinate with Zscaler TAC on vendor issues.

- Contribute to Zero Trust initiatives and integration with SD-WAN and SaaS (M365, AWS); build monitoring dashboards and SLA reporting.

- Mentor, train and provide technical support to the L2 team; build and maintain runbooks, SOPs and technical documentation; comply with ISO 27001, NIST and Zero Trust standards.

Job Requirements:

- Bachelor's degree in IT, Information Security, Computer Networking or equivalent.

- Minimum 4 years of experience in network/security operations, including in-depth experience with Zscaler (ZIA and/or ZPA) or an equivalent SSE/SASE solution.

-Strong understanding of Zero Trust architecture, proxy/SWG, CASB and ZTNA; proficient in TCP/IP, DNS, HTTP/HTTPS, routing, IPSec/GRE VPN and PKI/SSL.

- Experience in RCA analysis, performance tuning and complex incident handling; operating under ITIL/ITSM (ServiceNow).

- English proficiency of at least B1 (equivalent to TOEIC 600 - 700) to work with the global customer and vendors.

- Ability to work independently, provide technical leadership, work in shifts and handle high pressure.

- Preferred candidates:

+ Hold advanced Zscaler certifications: ZCCP-IA (Internet Access), ZCCP-PA (Private Access) or ZDTA.

+ Hold advanced networking/security certifications: CCNP Security, PCNSE, Fortinet NSE 4+ or equivalent.

+ Hold cloud certifications (AWS/Azure) and ITIL; experience with ServiceNow/API integration is an advantage.

Benefits:

· Competitive income based on the candidate's capability, 13th-month salary and KPI bonus

· Working time: Monday to Friday, shift 13:00 - 22:00 (supporting a global customer); remote work available; 15 annual leave days/year and public holidays as regulated

· Opportunities for advanced professional training;

· Opportunity to work on large domestic and international projects (e.g. Japan, Korea, Singapore...)

· Annual salary review;

· FPTCare insurance for yourself and the option to buy FPTCare at a preferential price for your family; periodic health check-up program

· Preferential loan policy for technology staff to buy houses and cars; laptop purchase support policy

· Participation in team-building, vacation, cultural activities and attractive events of FPT IS Company and FPT Corporation