Sase/ztna

Sase/ztna Engineer Jobs

11 jobs found

Today

Zero Trust Cyber Security Engineer

Leidos Remote 🌍 Remote

Remote

Today

$108k - $195k/yr Full time Cybersecurity Tools Identity and Access Management Information Security

Apply Now

Job Description

This remote position focuses on assessing, implementing, maintaining, and reporting on the VA's Zero Trust architecture to secure VA digital assets, in partnership with cross-functional teams. Compensation is USD 107,900 to 195,050 per year.

Responsibilities

Evaluate infrastructure alignment with the Department of Defense Zero Trust Maturity Model.
Generate a Monthly Maturity Scorecard report using customer-driven parameters.
Develop a dashboard to present the Monthly Maturity Scorecard data.
Calculate and report the percentage compliance for each Zero Trust Pillar capability group.
Assess each Zero Trust Pillar and identify targeted improvement opportunities.
Refresh dashboard data from the Monthly Maturity Scorecard and underlying sources.
Incorporate the assessment approach based on CISA and DoD Zero Trust Maturity Models.
Expand VA specific reference architecture target capabilities.
Document how VA should implement ZTA across conceptual, logical, and implementation layers within the target architecture.
Collaborate with ZTA Pillar Leads to determine the use of existing toolsets or the need for additional tools.
Assist in assembling ZTA Engineering and Implementation plans, outlining processes to roll out ZTA Use Cases across VA information systems, considering all system variations.
Update plans in response to new cases, deployments, stakeholder input, and system owner feedback.
Support the completion of 100 information system implementations within each period of performance.
Coordinate with the VA Office of Information Security to onboard systems into an Operations and Maintenance Risk Management Framework process.

Requirements

Bachelor's degree and at least 10 years of cybersecurity engineering experience, or 18+ years of established industry experience.
Eligibility to obtain and maintain a Public Trust clearance.
Experience in dashboard creation.
Proven track record as a Cyber Security Engineer with a focus on implementing and maintaining Zero Trust architectures.
Deep knowledge of Zero Trust principles, Identity and Access Management, micro-segmentation, network security, and encryption techniques.
Experience with security tools such as firewall solutions, intrusion detection/prevention systems, and SIEM tools.
Familiarity with industry regulations and compliance requirements, including NIST 800-207, OMB M-22-09, CISA Zero Trust Security Model, and Executive Order 14028.
Strong problem-solving skills and the ability to work in a fast-paced, collaborative environment.
Excellent communication skills to convey complex security concepts to both technical and non-technical stakeholders.

Technologies

Department of Defense Zero Trust Maturity Model
CISA/DoD Zero Trust Maturity Models
NIST 800-207
OMB M-22-09
CISA Zero Trust Security Model
Executive Order 14028 – Improving the Nation's Cybersecurity
eMASS
ServiceNow CAM
Software-defined perimeter (SDP) tools
Identity and Access Management (IAM) solutions
Micro-segmentation technologies
Firewall solutions
Intrusion Detection Systems (IDS)
Intrusion Prevention Systems (IPS)
SIEM tools
PIV (VA certificate)

Benefits

Competitive compensation
Health and Wellness programs
Income Protection
Paid Leave
Retirement

View full job page →

2d ago

Cyber Zscaler Network Security Engineer / Senior Consultant, Strategy, Growth, and Transformation

Deloitte Detroit, MI

Detroit, MI

2d ago

$105k - $208k/yr Full time Cloud Infrastructure Cloud Operations Cloud Platforms

Apply Now

Job Description

Deloitte is hiring in Detroit on site for a Cyber Zscaler Network Security Engineer / Senior Consultant who will help clients modernize network security with cloud-delivered zero-trust architectures. You will design, deploy, and optimize Zscaler capabilities across both on-premises and cloud environments, strengthening security posture, improving user access experiences, and enabling secure transformation. This role offers a competitive salary range of USD 105,400 to 207,800 per year and a discretionary annual incentive program.

Benefits

Discretionary annual incentive program

Responsibilities

Design, deploy, and operate Zscaler Internet Access (ZIA) and Zscaler Private Access (ZPA) across enterprise environments
Support zero trust network access transformations by replacing legacy VPNs and modernizing access controls
Configure and optimize Zscaler security features, including policy administration, SSL/TLS inspection, advanced threat protection, data loss prevention, and cloud-based traffic inspection
Implement branch, cloud, and application connectors across on‑premises and cloud, including AWS, Azure, and GCP
Develop technical deliverables, solution designs, and client-facing recommendations aligned to security, network transformation, and operational requirements

Requirements

BA/BS degree in a technical field (e.g., Computer Science, Cyber Security, Information Technology) or equivalent work experience
Zscaler Digital Transformation Engineer (ZDTE) certification required
5+ years of progressively responsible experience in network security engineering
5+ years designing, deploying, and managing ZIA with web filtering, DNS security, cloud firewall, bandwidth controls, and advanced threat protection policies at enterprise scale
5+ years designing, deploying, and managing ZPA, including application segment configuration, access policies, connector deployment, and zero trust architectures replacing legacy VPNs
1+ years designing, deploying, and managing Zscaler Branch Connector with BGP/static routing and network segmentation to replace traditional SD-WAN
1+ years designing, deploying, and managing Zscaler Cloud Connector in cloud environments (AWS, Azure, and/or GCP) with workload-to-internet and workload-to-workload inspection
3+ years configuring and tuning Zscaler advanced security features (Cloud Sandboxing, ATP, IPS, CBI, DLP)
3+ years implementing and troubleshooting SSL/TLS inspection within ZIA, including certificate management, decryption policy design, bypass rules, and handling certificate-pinned apps
1+ years working with Zscaler AI-powered capabilities, including AI-driven policy recommendations, ZDX, and AI/ML threat intelligence for automated threat response
3+ years defining, managing, and reviewing Zscaler security policies, including rule base optimization, policy lifecycle, access reviews, and RBAC within the Zscaler Admin Portal
Experience implementing ZIdentity for centralized identity management
3+ years of experience with one or more major cloud providers (AWS, GCP, Azure) to deploy ZPA App Connectors within cloud-native architectures
3+ years deploying Zscaler Cloud Connector
Experience integrating Zscaler with SIEM/SOAR platforms (Splunk, Microsoft Sentinel, Palo Alto XSOAR) via log streaming, API connectors, or syslog
Experience with Zscaler APIs and automation tooling (Terraform, Ansible, Python) for provisioning, policy management, and configuration-as-code workflows
Experience designing and presenting Zscaler solution architectures tailored to client requirements for executive and non-technical stakeholders
Familiarity with identity provider integrations (Okta, Azure AD, Ping Identity) for SAML/SCIM-based authentication in ZIA and ZPA
Ability to travel up to 50% on average
Limited immigration sponsorship may be available

Technologies

Zscaler Internet Access (ZIA), Zscaler Private Access (ZPA), ZTNA
SSL/TLS inspection, Advanced Threat Protection (ATP), Cloud Sandboxing, Cloud Browser Isolation (CBI), Data Loss Prevention (DLP)
Zscaler AI capabilities, Digital Experience Monitoring (ZDX), ZIdentity
Zscaler Cloud Connector, Zscaler Branch Connector, Zscaler Admin Portal
Zscaler APIs, Terraform, Ansible, Python
AWS, Azure, Google Cloud Platform (GCP)
Okta, Azure AD, Ping Identity, Splunk, Microsoft Sentinel, Palo Alto XSOAR
SAML/SCIM, VPCs, VNets, Transit Gateways, BGP/static routing

The team

Our Enterprise Security offering embeds security across digital transformation initiatives, securing the technical backbone while enabling secure growth. The practice encompasses security architecture, secure development and deployment, end-to-end cloud security capabilities, application security, and security considerations for emerging technologies and connected products.

View full job page →

4d ago

Cyber Zscaler Network Security Engineer / Senior Consultant, Strategy, Growth, and Transformation

Deloitte Atlanta, GA

Atlanta, GA

4d ago

$105k - $208k/yr Full time Cloud Cloud Architecture Cloud Infrastructure

Apply Now

Job Description

Deloitte offers a collaborative, client‑driven environment where security professionals modernize network protection through cloud delivered zero trust architectures. This onsite role in Atlanta focuses on designing, deploying, and optimizing Zscaler capabilities across both on‑premises and cloud environments. You will deliver technical designs, client‑facing recommendations, and enable secure transformation to strengthen security posture while improving user access experiences. Compensation ranges from USD 105,400 to 207,800 per year, plus a discretionary annual incentive program. This position is based on site in Atlanta, GA.

Benefits

Discretionary annual incentive program

Responsibilities

Design, deploy, and manage Zscaler Internet Access (ZIA) and Zscaler Private Access (ZPA) across enterprise client environments
Support zero trust network access transformations, replacing legacy VPNs and modernizing access controls
Configure and optimize Zscaler security features including policy administration, SSL/TLS inspection, advanced threat protection, data loss prevention, and cloud-based traffic inspection
Implement branch, cloud, and application connector architectures across on‑premises and cloud environments such as AWS, Azure, and Google Cloud Platform
Develop technical deliverables, solution designs, and client‑facing recommendations aligned to enterprise security, network transformation, and operational requirements

Requirements

BA/BS degree in a technical field (e.g., Computer Science, Cyber Security, Information Technology, or equivalent work experience)
Zscaler Digital Transformation Engineer (ZDTE) certification required
5+ years of progressively responsible experience in network security engineering
5+ years of hands-on experience designing, deploying, and managing ZIA, including web filtering, DNS security, cloud firewall, bandwidth controls, and advanced threat protection policies in enterprise environments
5+ years of hands-on experience designing, deploying, and managing ZPA, including application segment configuration, access policies, connector deployment, and zero trust network access architectures replacing legacy VPN infrastructure
1+ years of experience designing, deploying, and managing Zscaler Branch Connector, including BGP/static routing configurations and network segmentation to replace traditional SD-WAN platforms
1+ years of experience designing, deploying, and managing Zscaler Cloud Connector in cloud environments (AWS, Azure, and/or GCP), including workload to internet and workload to workload traffic inspection
3+ years of experience configuring and tuning Zscaler advanced security features such as Cloud Sandboxing, Advanced Threat Protection, Intrusion Prevention, Cloud Browser Isolation, and Data Loss Prevention
3+ years of experience implementing and troubleshooting SSL/TLS inspection within ZIA, including certificate management and decryption policy design
1+ years of experience with Zscaler AI powered capabilities including AI driven policy recommendations and Digital Experience Monitoring (ZDX)
3+ years of hands-on experience defining, managing, and reviewing Zscaler security policies including policy lifecycle and RBAC in the Zscaler Admin Portal
Experience implementing ZIdentity for centralized identity management
3+ years of experience with one or more major cloud providers (AWS, GCP, Azure) to deploy ZPA App Connectors
3+ years of experience deploying Zscaler Cloud Connector
Experience integrating Zscaler with SIEM/SOAR platforms (Splunk, Microsoft Sentinel, Palo Alto XSOAR) via log streaming, API connectors, or syslog
Experience with Zscaler APIs and automation tooling (Terraform, Ansible, Python) for provisioning and configuration as code
Experience designing and presenting Zscaler solution architectures tailored to client requirements and communicating effectively to executives
Familiarity with identity provider integrations (Okta, Azure AD, Ping Identity) for SAML/SCIM authentication within ZIA and ZPA
Ability to travel up to 50 percent
Limited immigration sponsorship may be available
Ability to work independently and as part of a team, with strong written and verbal communication skills
Meticulous attention to detail, professional demeanor, and the ability to manage multiple tasks in a dynamic environment

Technologies

Zscaler Internet Access (ZIA)
Zscaler Private Access (ZPA)
Zscaler Branch Connector
Zscaler Cloud Connector
SSL/TLS inspection
AWS, Azure, GCP
BGP, VPCs, VNets, Transit Gateways
Cloud Sandboxing
Advanced Threat Protection (ATP)
Intrusion Prevention (IPS)
Cloud Browser Isolation (CBI)
Data Loss Prevention (DLP)
ZDX (Digital Experience Monitoring)
Zscaler AI powered capabilities
ZIdentity
Okta, Azure AD, Ping Identity
Terraform, Ansible, Python
Splunk, Microsoft Sentinel, Palo Alto XSOAR
Zscaler APIs

The Team

Our Enterprise Security practice weaves security into every facet of digital transformation. The team covers security architecture, secure development and deployment, end to end cyber cloud capabilities, application security, and security for emerging technologies and connected products. You will join a culture that values collaboration, rigorous delivery, and a focus on protecting client assets while enabling secure innovation.

View full job page →

5d ago

Zscaler Network Security Engineer / Senior Consultant, Strategy, Growth, and Transformation

Deloitte Morristown, NJ

Morristown, NJ

5d ago

$105k - $208k/yr Full time Cloud Architecture Cloud Infrastructure Cloud Platforms

Apply Now

Job Description

Deloitte is seeking a Zscaler Network Security Engineer / Senior Consultant in Morristown, NJ to design, deploy, and optimize Zscaler capabilities and modernize network security through cloud-delivered zero trust architectures spanning on premises and cloud environments.

Responsibilities

Design, deploy, and operate ZIA and ZPA components across client enterprise environments.
Support ZTNA initiatives, including replacing legacy VPN infrastructure and modernizing access controls.
Configure and tune Zscaler security features such as policy administration, SSL/TLS inspection, advanced threat protection, data loss prevention, and cloud-based traffic inspection.
Implement branch, cloud, and application connector architectures across on-premises and cloud environments, including AWS, Azure, and GCP.
Develop technical deliverables, solution designs, and client-facing guidance aligned to security, network transformation, and operational requirements.

Requirements

Ability to work autonomously and collaborate within a team.
Strong written and verbal communication skills.
High attention to detail and commitment to quality of work.
Ability to establish and maintain professional relationships.
Experience leading projects or workstreams.
Capacity to manage and prioritize multiple tasks in a fast-paced environment.
Strong interpersonal skills and professional demeanor.
Proven ability to meet deadlines.
Ability to provide clear guidance to team members.

Technologies

Zscaler Internet Access (ZIA)
Zscaler Private Access (ZPA)
Zero Trust Network Access (ZTNA)
VPN
SSL/TLS inspection
Advanced Threat Protection (ATP)
Data Loss Prevention (DLP)
Cloud-based traffic inspection
Amazon Web Services (AWS)
Microsoft Azure
Google Cloud Platform (GCP)
Zscaler Branch Connector
Zscaler Cloud Connector
Zscaler AI-powered capabilities
Digital Experience Monitoring (ZDX)
ZIdentity
Okta
Azure AD
Ping Identity
SAML/SCIM
Terraform
Ansible
Python
Splunk
Microsoft Sentinel
Palo Alto XSOAR
Zscaler APIs
VPCs
VNets
Transit Gateways

Benefits

Discretionary annual incentive program eligibility

The Team

Our Enterprise Security offering embeds security in all aspects of digital transformation by securing a client's technical backbone while enabling secure digital transformation. Includes security architecture, secure development and deployment, end-to-end cyber cloud capabilities, application security, and security for emerging technologies and connected products.

View full job page →

8d ago

Zscaler Network Security Engineer / Senior Consultant, Strategy, Growth, and Transformation

Deloitte San Diego, CA

San Diego, CA

8d ago

$105k - $208k/yr Full time Ai Security Cloud Architecture Cloud Platforms

Apply Now

Job Description

Deloitte's on-site opportunity in San Diego, CA invites senior security professionals to guide enterprise clients through modernizing their network defenses with cloud-delivered zero trust using Zscaler (ZIA and ZPA) across on‑premises and cloud environments. The role sits within Deloitte’s security practice, offering a competitive salary range of USD 105,400 to 207,800 per year and a discretionary annual incentive program.

Benefits

Discretionary annual incentive program

The Team

Our Enterprise Security offering integrates security across the full spectrum of digital transformation. The practice secures a client’s technical backbone while enabling secure innovation, covering security architecture, secure development and deployment, end-to-end cloud security capabilities, application security, and protection for emerging technologies and connected products.

Responsibilities

Design, deploy, and operate Zscaler Internet Access (ZIA) and Zscaler Private Access (ZPA) across large enterprise environments
Support zero trust network access transformations, including replacing legacy VPNs and modernizing access controls
Configure and optimize Zscaler security features such as policy administration, SSL/TLS inspection, advanced threat protection, data loss prevention, and cloud-based traffic inspection
Implement branch, cloud, and application connectors across on-premises and cloud platforms including AWS, Microsoft Azure, and Google Cloud Platform
Develop technical deliverables, solution designs, and client-facing recommendations aligned to enterprise security, network transformation, and operational requirements

Requirements

Ability to work independently and as part of a team
Effective written and verbal communication skills
Meticulous attention to detail and quality of work
Ability to build and sustain professional relationships
Ability to lead projects or workstreams
Capability to manage and prioritize multiple tasks in a fast-paced environment
Strong interpersonal skills and professional demeanor
Ability to meet deadlines and provide clear guidance to others
BA/BS degree in a technical field (e.g., Computer Science, Cyber Security, Information Technology, or equivalent experience)
Zscaler Digital Transformation Engineer (ZDTE) certification required
5+ years of progressively responsible experience in network security engineering
5+ years hands-on experience designing, deploying, and managing ZIA including web filtering, DNS security, cloud firewall, bandwidth controls, and ATP policies
5+ years hands-on experience designing, deploying, and managing ZPA including application segment configuration, access policies, connector deployment, and ZTNA architectures replacing legacy VPNs
1+ years experience designing, deploying, and managing Zscaler Branch Connector with BGP/static routing and network segmentation, replacing traditional SD-WAN
1+ years experience designing, deploying, and managing Zscaler Cloud Connector in cloud environments (AWS, Azure, and/or GCP) with workload-to-internet and workload-to-workload inspection, integrated with cloud-native networking constructs
3+ years configuring and tuning advanced security features such as Cloud Sandboxing, ATP, IPS, CBI, and DLP policies
3+ years implementing SSL/TLS inspection within ZIA, including certificate management and decryption policy design
1+ years experience with Zscaler AI-powered capabilities, including AI-driven policy recommendations and ZDX
3+ years defining, managing, and reviewing Zscaler security policies, including rule base optimization and RBAC in the Admin Portal
Experience implementing ZIdentity for centralized identity management
3+ years with one or more major cloud providers (AWS, GCP, Azure) to deploy ZPA App Connectors within cloud-native architectures
3+ years deploying Zscaler Cloud Connector
Experience integrating Zscaler with SIEM/SOAR platforms (e.g., Splunk, Microsoft Sentinel, Palo Alto XSOAR) via log streaming, API connectors, or syslog
Experience with Zscaler APIs and automation tooling (Terraform, Ansible, Python) for provisioning and policy management
Experience designing and presenting Zscaler solution architectures tailored to client requirements and communicating with executive and non-technical stakeholders
Familiarity with identity providers (Okta, Azure AD, Ping Identity) for SAML/SCIM authentication in ZIA and ZPA deployments
Ability to travel up to 50% as duties and client needs require
Limited immigration sponsorship may be available

Technologies

Zscaler Internet Access (ZIA), Zscaler Private Access (ZPA), ZTNA
SSL/TLS inspection, Advanced Threat Protection (ATP), Cloud Sandboxing
Intrusion Prevention (IPS), Cloud Browser Isolation (CBI), Data Loss Prevention (DLP)
Zscaler Branch Connector, Zscaler Cloud Connector
AI powered capabilities, Digital Experience Monitoring (ZDX)
ZIdentity, Terraform, Ansible, Python
SIEM/SOAR integrations (Splunk, Microsoft Sentinel, Palo Alto XSOAR)
Okta, Azure Active Directory, Ping Identity
AWS, Azure, Google Cloud Platform

View full job page →

10d ago

Cyber Zscaler Network Security Engineer / Senior Consultant, Strategy, Growth, and Transformation

Deloitte Austin, TX

Austin, TX

10d ago

$105k - $208k/yr Full time Analytics Cloud Cloud Architecture

Apply Now

Job Description

Deloitte is seeking a Cyber Zscaler Network Security Engineer / Senior Consultant to advance enterprise security through Zscaler cloud-delivered zero-trust architectures. This onsite role in Austin, TX focuses on the design, deployment, and optimization of ZIA and ZPA across both on premises and cloud environments. The position offers a salary range of USD 105,400 to 207,800 per year and requires a BA/BS degree in a technical field along with relevant experience.

Responsibilities

Design, deploy, and manage Zscaler Internet Access (ZIA) and Zscaler Private Access (ZPA) across enterprise client environments.
Support zero trust network access transformations by replacing legacy VPN infrastructure and modernizing access controls.
Configure and optimize Zscaler security features, including policy administration, SSL/TLS inspection, advanced threat protection, data loss prevention, and cloud-based traffic inspection.
Implement branch, cloud, and application connectors across on‑premises and cloud platforms such as AWS, Microsoft Azure, and Google Cloud Platform (GCP).
Develop technical deliverables, solution designs, and client-facing recommendations aligned to enterprise security, network modernization, and operational requirements.

Requirements

BA/BS degree in a technical field (e.g., Computer Science, Cyber Security, Information Technology) or equivalent work experience.
Zscaler Digital Transformation Engineer (ZDTE) certification is required.
5+ years of progressively responsible experience in network security engineering.
5+ years of hands-on experience designing, deploying, and managing ZIA, including web filtering, DNS security, cloud firewall, bandwidth controls, and advanced threat protection policies in enterprise environments.
5+ years of hands-on experience designing, deploying, and managing ZPA, including application segment configuration, access policies, connector deployment, and zero trust network access architectures replacing legacy VPNs.
1+ years of experience designing, deploying, and managing Zscaler Branch Connector, with knowledge of BGP/static routing and network segmentation to replace traditional SD-WAN platforms.
1+ years of experience designing, deploying, and managing Zscaler Cloud Connector in cloud environments (AWS, Azure, and/or GCP), including workload-to-internet and workload-to-workload traffic inspection and integration with cloud networking constructs.
3+ years of experience configuring and tuning advanced security features such as Cloud Sandboxing, Advanced Threat Protection, Intrusion Prevention, Cloud Browser Isolation, and Data Loss Prevention.
3+ years of experience implementing and troubleshooting SSL/TLS inspection within ZIA, including certificate management, decryption policy design, bypass rules, and handling certificate-pinned applications.
1+ years of experience with Zscaler AI-powered capabilities, including AI-driven policy recommendations and Digital Experience Monitoring (ZDX), plus leveraging AI/ML threat intelligence for automated responses.
3+ years of hands-on experience defining, managing, and reviewing Zscaler security policies, including rule base optimization, policy lifecycle management, access reviews, and RBAC in the Zscaler Admin Portal.
Experience implementing ZIdentity for centralized identity management.
3+ years of experience with one or more major cloud providers (AWS, GCP, Azure) to deploy ZPA App Connectors within cloud-native architectures.
3+ years of experience deploying Zscaler Cloud Connector.
Experience integrating Zscaler with SIEM/SOAR platforms (e.g., Splunk, Microsoft Sentinel, Palo Alto XSOAR) via log streaming, API connectors, or syslog for threat detection and incident response workflows.
Experience with Zscaler APIs and automation tooling (Terraform, Ansible, Python) for provisioning, policy management, and configuration-as-code workflows.
Experience designing and presenting Zscaler solution architectures tailored to client requirements and translating technical concepts for executive and non-technical stakeholders.
Familiarity with identity provider integrations (Okta, Azure AD, Ping Identity) for SAML/SCIM-based authentication within ZIA and ZPA deployments.
Ability to travel up to 50 percent, depending on client engagement and project requirements.
Limited immigration sponsorship may be available.

Technologies

Zscaler Internet Access (ZIA)
Zscaler Private Access (ZPA)
Zscaler Branch Connector
Zscaler Cloud Connector
Zscaler AI-powered capabilities and ZDX
ZIdentity
AWS, Microsoft Azure, Google Cloud Platform (GCP)
Splunk, Microsoft Sentinel, Palo Alto XSOAR
Terraform, Ansible, Python
Okta, Azure AD, Ping Identity

Benefits

Discretionary annual incentive program eligibility

The Team

Our Enterprise Security offering integrates security across the digital transformation journey, safeguarding a client’s technical backbone while enabling secure modernization. The group encompasses security architecture, secure development and deployment practices, end-to-end cyber cloud capabilities, application security, and protection for emerging technologies and connected products.

View full job page →

11d ago

Zscaler Network Security Engineer / Senior Consultant, Strategy, Growth, and Transformation

Deloitte Los Angeles, CA

Los Angeles, CA

11d ago

$105k - $208k/yr Full time Cloud Architecture Cloud Platforms Consultant

Apply Now

Job Description

Senior Consultant in Deloitte's Cyber Enterprise Security group focused on modernizing network security with cloud-delivered zero trust architectures using Zscaler across on premise and cloud environments.

RESPONSIBILITIES

Design, deploy, and manage ZIA and ZPA capabilities across enterprise client environments
Support zero trust network access transformations, replacing legacy VPNs and updating access controls
Configure and optimize Zscaler security features including policy administration, SSL/TLS inspection, advanced threat protection, data loss prevention, and cloud-based traffic inspection
Implement branch, cloud, and application connectors across on‑premises and cloud setups (AWS, Azure, GCP)
Develop technical deliverables, solution designs, and client-facing recommendations aligned to security, network transformation, and operations requirements

REQUIREMENTS

BA/BS degree in a technical field (e.g., Computer Science, Cyber Security, Information Technology) or equivalent work experience
Zscaler Digital Transformation Engineer (ZDTE) certification is required
5+ years of progressively responsible experience in network security engineering
5+ years designing, deploying, and managing ZIA, including web filtering, DNS security, cloud firewall, bandwidth controls, and ATP/DLP policies in enterprise-scale environments
5+ years designing, deploying, and managing ZPA, including application segment configuration, access policies, connector deployment, and zero trust architectures replacing legacy VPNs
1+ years designing, deploying, and managing Zscaler Branch Connector with BGP/static routing and network segmentation to replace traditional SD-WAN platforms
1+ years designing, deploying, and managing Zscaler Cloud Connector in cloud environments (AWS, Azure, GCP) with workload-to-internet and workload-to-workload inspection and integration with VPCs, VNets, and Transit Gateways
3+ years configuring and tuning advanced Zscaler security features including Cloud Sandboxing, Advanced Threat Protection, IPS, Cloud Browser Isolation, and DLP policies
3+ years implementing and troubleshooting SSL/TLS inspection within ZIA, covering certificate management, decryption policy design, bypass rules, and handling certificate-pinned applications
1+ years working with Zscaler AI capabilities, including AI-driven policy recommendations, Digital Experience Monitoring (ZDX), and AI/ML threat intelligence for automated responses
3+ years defining, managing, and reviewing Zscaler security policies, including rule base optimization, policy lifecycle, access reviews, and RBAC in the Admin Portal
Experience implementing ZIdentity for centralized identity management
3+ years with one or more major cloud providers (AWS, GCP, Azure) to deploy ZPA App Connectors in cloud-native architectures
3+ years deploying Zscaler Cloud Connector
Experience integrating Zscaler with SIEM/SOAR platforms (e.g., Splunk, Microsoft Sentinel, Palo Alto XSOAR) via log streaming, API connectors, or syslog for threat detection and response workflows
Experience with Zscaler APIs and automation tooling (Terraform, Ansible, Python) for provisioning, policy management, and infrastructure-as-code workflows
Experience designing and presenting Zscaler architectures tailored to client requirements and communicating concepts to executives and non-technical stakeholders
Familiarity with identity provider integrations (Okta, Azure AD, Ping Identity) for SAML/SCIM-based authentication in ZIA and ZPA
Ability to travel up to 50 percent, depending on client engagement
Limited immigration sponsorship may be available

TECHNOLOGIES

Zscaler Internet Access (ZIA)
Zscaler Private Access (ZPA)
Zscaler Branch Connector
Zscaler Cloud Connector
ZDX
AWS, Microsoft Azure, Google Cloud Platform (GCP)
Terraform, Ansible, Python
Splunk, Microsoft Sentinel, Palo Alto XSOAR
Okta, Azure AD, Ping Identity
ZIdentity

BENEFITS

Discretionary annual incentive program

THE TEAM

Our Enterprise Security offering integrates security across digital transformation, safeguarding a client’s technical backbone while enabling secure, accelerated modernization. The practice spans security architecture, secure development and deployment, cloud security, application security, and security for emerging technologies and connected products.

PREFERRED QUALIFICATIONS

Advanced cybersecurity certifications such as CISSP, CCIE Security, CCNP Security, or GIAC equivalents (e.g., GPEN, GCSA)
Ability to conduct SASE vendor competitive analyses and advise clients on solution choices based on use cases (for example Zscaler vs. Palo Alto Prisma vs. Netskope)
Capability to perform Zero Trust Architecture assessments and develop roadmaps aligning Zscaler capabilities with NIST SP 800-207 or CISA Zero Trust Maturity Model frameworks
Previous consulting or Big 4 experience with a track record delivering enterprise network security or SASE transformation engagements