Security Engineer - Zscaler

Configure, implement, and maintain Zscaler ZIA and ZPA environments to protect user access and data.

Manage policies related to web filtering, SSL inspection, DLP, and threat protection.

Integrate Zscaler services with identity providers such as Azure AD or Okta for single sign-on and access control.

Monitor and tune security policies to balance user experience with effective threat prevention.

Collaborate with network and endpoint teams to ensure consistent security enforcement across all platforms.

Conduct performance analysis and troubleshoot traffic routing, latency, or authentication issues within the Zscaler environment.

Partner with the SOC and incident response teams to investigate and contain security events involving Zscaler logs or alerts.

Provide documentation, configuration standards, and operational runbooks for Zscaler deployments.

Participate in change management reviews and security assessments for new applications and network integrations.

Stay current with emerging threats, zero-trust architecture models, and Zscaler platform updates.

Familiarity with automation and API-based integrations for policy management.

Working knowledge of identity and access management, cloud security, and zero-trust principles.

Strong knowledge of network protocols, DNS, SSL/TLS, VPN, and proxy architecture.

Bachelor’s degree in Computer Science, Cybersecurity, or related field (or equivalent experience) .

3+ years of hands-on experience administering and troubleshooting Zscaler ZIA/ZPA in an enterprise environment.

Experience integrating Zscaler with SIEM and endpoint security platforms.

Background in regulated industries such as insurance, banking, or healthcare preferred.

Certifications such as Zscaler Certified Cloud Professional (ZCCP), Zscaler Certified Cloud Administrator (ZCCA), or equivalent.

Experience with Microsoft Defender, Sentinel, or other security orchestration tools preferred.