Zscaler ZIA/ZPA Implementation Expert

Zscaler ZIA/ZPA Implementation Expert (Freelance) - 3 Months - Gosselies, Belgium

Where Builders Build the Future

At RELYzIT Talent, we don’t recruit — we build. We unite the top 2% of builders — engineers, architects, creators — into a movement across Europe and the GCC. Vetted through our VECTOR7™ Signal Stack, you’re not just hired, you’re chosen. This is more than work. This is where builders build the future.

We’re seeking a Zscaler ZIA/ZPA Implementation Expert for a high-impact freelance mission with our client in Gosselies, Belgium. This is a 3-month engagement where your expertise will accelerate a critical migration to a Zero Trust platform, shaping secure digital access for thousands.

Why This Role Matters

Our client is transitioning from legacy FortiClient/FortiEMS remote access to a cutting-edge Zscaler Zero Trust environment. Your mission: design, document, and pilot the migration to Zscaler ZIA (Internet Access) and ZPA (Private Access), ensuring seamless, secure connectivity for users and applications. You’ll empower internal teams, transfer knowledge, and set the foundation for a future-proof security posture. The stakes are high — business continuity, security, and operational excellence depend on your leadership.

What You’ll Be Doing

• Design the target Zscaler ZIA and ZPA architecture, integrating with Azure Entra ID, Intune, SIEM, and mobile/BYOD strategies.


• Produce comprehensive architecture and operations documentation, including HLD, LLD, DAT, and operational guides (levels 1–3).


• Define and implement Zscaler technical components, including App Connectors, Service Edge, and authentication flows.


• Analyze the existing environment: current ZIA configurations, FortiClient VPN usage, application dependencies, and network flows.


• Prepare and execute the migration from FortiClient VPN to ZPA, and support the ZIA migration, ensuring minimal disruption.


• Identify and implement optimizations for the Zscaler tenant, addressing performance, latency, and bypass requirements.


• Support and train internal teams (ORES resources) throughout design, pilot, and migration phases, ensuring knowledge transfer and operational readiness.


• Lead pilot migrations, validate functionality, and drive wave-based deployment strategies for user and application onboarding.


• Deliver all required documentation and reports, including migration plans, application catalogs, flow mapping, and piloting recommendations.

What We’re Looking For

• Proven expertise in Zscaler ZIA and ZPA, with at least 5 years of hands-on experience in similar migration projects.


• ZDTE certification or higher (must have).


• Deep understanding of network security, Zero Trust architectures, and secure remote access solutions.


• Experience designing and documenting complex architectures, including integration with Azure Entra ID, SCIM, SIEM, Intune, and mobile/BYOD environments.


• Track record of producing high-quality technical and operational documentation (HLD, LLD, DAT, support procedures, troubleshooting guides).


• Strong analytical skills: able to reverse-engineer application flows, identify dependencies, and optimize configurations.


• Builder mindset: ownership, initiative, and a passion for delivering impact in high-stakes environments.


• Experience supporting and training technical teams, with a focus on knowledge transfer and operational excellence.


• Ability to work collaboratively with client teams, adapting to constraints and driving outcomes.

Technical Skills

• Zscaler ZIA and ZPA (design, implementation, migration)


• ZDTE certification (required)


• Network security (VPN, Zero Trust, App Connectors, Service Edge)


• Azure Entra ID integration


• SCIM provisioning


• SIEM integration and log management


• Intune and mobile/BYOD strategy


• Technical documentation (HLD, LLD, DAT, operational guides)


• Application flow analysis and migration planning

Language Proficiency

• English: B2 level or higher (European CEFR scale) – required


• French: B2 level or higher (European CEFR scale) – required

Other Requirements

• Freelance position – 3 months, on-site in Gosselies, Belgium


• Experience in similar Zscaler migration projects (must have)


• Ability to produce and monitor operational and technical documentation


• Builder-first mindset: proactive, collaborative, and impact-driven