Apply on Employer Site

Tata Consultancy Services · 1 day ago

L3 Onsite Network Technical Lead

Atlanta, GA

Full-time

Onsite

Senior Level, Lead/Staff

$130K/yr - $160K/yr

10+ years exp

Tata Consultancy Services is seeking an L3 Onsite Network Technical Lead to design and implement high-performance, secure, and scalable network solutions. The role involves planning network upgrades, maintaining infrastructure, and ensuring compliance with security standards while leading network-related projects.

Business Information SystemsConsultingInformation TechnologyIT Management

H1B Sponsor Likely

Responsibilities

Design and implement high-performance, secure, and scalable network solutions that meet business requirements

Plan and execute network upgrades, expansions, and optimizations to support growth and technological advancements

Develop and maintain network architecture diagrams, documentation, and standard operating procedures

Monitor, manage, and maintain the network infrastructure, ensuring optimal performance and minimal downtime

Implement and manage network monitoring tools and systems to proactively identify and resolve issues

Perform regular network maintenance tasks, including updates, patches, and configuration changes

Diagnose and resolve complex network issues related to connectivity, performance, and security

Provide third-tier support for network-related incidents, collaborating with other IT teams as needed

Analyze network traffic and performance metrics to identify bottlenecks, inefficiencies, and security risks

Implement and maintain robust network security measures, including firewalls, VPNs, and intrusion detection/prevention systems

Conduct regular security audits, vulnerability assessments, and risk management activities

Ensure compliance with industry standards and organizational security policies

Lead or participate in network-related projects, ensuring timely delivery and alignment with business goals

Collaborate with cross-functional teams to design and implement network solutions that support new applications, services, and technologies

Validate ZCC agent status (running, enrolled, service health)

Validate user authentication (SSO login attempts, MFA prompts)

Business-critical app blocked (URL category, blacklist) – Troubleshooting from VPN perspective

SSL Inspection exceptions (bypass specific domains)

URL category updates (reclassification)

Allow/block list changes (domain or URL) in Zscaler

ZIA Firewall / Cloud App Controls (if licensed: L7 firewall rules, app control)

Threat protection controls (ZIA IPS, malware, sandboxing)

Performance / slowness (latency, DNS, routing, tunnel issues)

Routing / DNS problems

WAN / ISP issues (circuit, upstream problems)

VPN/ZCC coexistence (split tunneling, routing overlap)

Unexpected Zscaler behavior (redirect loops, intermittent connection)

ZCC install/uninstall

ZCC corruption / agent malfunction troubleshooting

EDR/AV conflicts with ZCC troubleshooting

Zscaler tunnel management (GRE/IPSec health, failover)

Zscaler PAC file management (ruleset updates, hosting, troubleshooting)

ZIA admin policies (device posture, app segmentation, identity rules)

Identity / SSO integration (Azure AD, SCIM, user attributes)

Role-based admin access (RBAC roles, Zscaler admin privileges)

Zscaler TAC engagement (support tickets, troubleshooting escalations)

ZIA release management (client connector upgrades, feature adoption)

Zscaler reporting/dashboarding (usage, SSL, threat, performance)

ZIA capacity & performance monitoring (tunnel load, DC selection)

Change management (CAB review for Zscaler changes)

Zscaler roadmap & strategy (align features, plan enhancements)

Escalation to SOC (filtering-related)

Escalation to IT Ops (infrastructure/platform-related)

Policy/exception/risk approvals (SSL, access exceptions)

Stay up-to-date with the latest networking technologies, trends, and best practices

Identify opportunities to improve network performance, security, and reliability

Qualification

Zscaler VPN solutionPalo AltoCISCO switchesNetwork security protocolsNetwork monitoring toolsNetwork designNetwork troubleshootingCloud networkingNetwork hardwareAnalytical skillsProblem-solving skillsCommunication skillsTeamworkIndependent work

Required

Very strong knowledge on routing, switching, network security protocols especially Zscaler VPN solution, Palo alto, Aruba, CISCO switches, Panorama, Zscaler ( ZCC and ZPA )