Zscaler Digital Experience

Zscaler Digital Experience Engineer Jobs

7 jobs found

Today

Cyber Zscaler Network Security Engineer / Senior Consultant, Strategy, Growth, and Transformation

Deloitte Detroit, MI

Detroit, MI

Today

$105k - $208k/yr Full time Cloud Infrastructure Cloud Operations Cloud Platforms

Apply Now

Job Description

Deloitte is hiring in Detroit on site for a Cyber Zscaler Network Security Engineer / Senior Consultant who will help clients modernize network security with cloud-delivered zero-trust architectures. You will design, deploy, and optimize Zscaler capabilities across both on-premises and cloud environments, strengthening security posture, improving user access experiences, and enabling secure transformation. This role offers a competitive salary range of USD 105,400 to 207,800 per year and a discretionary annual incentive program.

Benefits

Discretionary annual incentive program

Responsibilities

Design, deploy, and operate Zscaler Internet Access (ZIA) and Zscaler Private Access (ZPA) across enterprise environments
Support zero trust network access transformations by replacing legacy VPNs and modernizing access controls
Configure and optimize Zscaler security features, including policy administration, SSL/TLS inspection, advanced threat protection, data loss prevention, and cloud-based traffic inspection
Implement branch, cloud, and application connectors across on‑premises and cloud, including AWS, Azure, and GCP
Develop technical deliverables, solution designs, and client-facing recommendations aligned to security, network transformation, and operational requirements

Requirements

BA/BS degree in a technical field (e.g., Computer Science, Cyber Security, Information Technology) or equivalent work experience
Zscaler Digital Transformation Engineer (ZDTE) certification required
5+ years of progressively responsible experience in network security engineering
5+ years designing, deploying, and managing ZIA with web filtering, DNS security, cloud firewall, bandwidth controls, and advanced threat protection policies at enterprise scale
5+ years designing, deploying, and managing ZPA, including application segment configuration, access policies, connector deployment, and zero trust architectures replacing legacy VPNs
1+ years designing, deploying, and managing Zscaler Branch Connector with BGP/static routing and network segmentation to replace traditional SD-WAN
1+ years designing, deploying, and managing Zscaler Cloud Connector in cloud environments (AWS, Azure, and/or GCP) with workload-to-internet and workload-to-workload inspection
3+ years configuring and tuning Zscaler advanced security features (Cloud Sandboxing, ATP, IPS, CBI, DLP)
3+ years implementing and troubleshooting SSL/TLS inspection within ZIA, including certificate management, decryption policy design, bypass rules, and handling certificate-pinned apps
1+ years working with Zscaler AI-powered capabilities, including AI-driven policy recommendations, ZDX, and AI/ML threat intelligence for automated threat response
3+ years defining, managing, and reviewing Zscaler security policies, including rule base optimization, policy lifecycle, access reviews, and RBAC within the Zscaler Admin Portal
Experience implementing ZIdentity for centralized identity management
3+ years of experience with one or more major cloud providers (AWS, GCP, Azure) to deploy ZPA App Connectors within cloud-native architectures
3+ years deploying Zscaler Cloud Connector
Experience integrating Zscaler with SIEM/SOAR platforms (Splunk, Microsoft Sentinel, Palo Alto XSOAR) via log streaming, API connectors, or syslog
Experience with Zscaler APIs and automation tooling (Terraform, Ansible, Python) for provisioning, policy management, and configuration-as-code workflows
Experience designing and presenting Zscaler solution architectures tailored to client requirements for executive and non-technical stakeholders
Familiarity with identity provider integrations (Okta, Azure AD, Ping Identity) for SAML/SCIM-based authentication in ZIA and ZPA
Ability to travel up to 50% on average
Limited immigration sponsorship may be available

Technologies

Zscaler Internet Access (ZIA), Zscaler Private Access (ZPA), ZTNA
SSL/TLS inspection, Advanced Threat Protection (ATP), Cloud Sandboxing, Cloud Browser Isolation (CBI), Data Loss Prevention (DLP)
Zscaler AI capabilities, Digital Experience Monitoring (ZDX), ZIdentity
Zscaler Cloud Connector, Zscaler Branch Connector, Zscaler Admin Portal
Zscaler APIs, Terraform, Ansible, Python
AWS, Azure, Google Cloud Platform (GCP)
Okta, Azure AD, Ping Identity, Splunk, Microsoft Sentinel, Palo Alto XSOAR
SAML/SCIM, VPCs, VNets, Transit Gateways, BGP/static routing

The team

Our Enterprise Security offering embeds security across digital transformation initiatives, securing the technical backbone while enabling secure growth. The practice encompasses security architecture, secure development and deployment, end-to-end cloud security capabilities, application security, and security considerations for emerging technologies and connected products.

View full job page →

3d ago

Zscaler Network Security Engineer / Senior Consultant, Strategy, Growth, and Transformation

Deloitte Morristown, NJ

Morristown, NJ

3d ago

$105k - $208k/yr Full time Cloud Architecture Cloud Infrastructure Cloud Platforms

Apply Now

Job Description

Deloitte is seeking a Zscaler Network Security Engineer / Senior Consultant in Morristown, NJ to design, deploy, and optimize Zscaler capabilities and modernize network security through cloud-delivered zero trust architectures spanning on premises and cloud environments.

Responsibilities

Design, deploy, and operate ZIA and ZPA components across client enterprise environments.
Support ZTNA initiatives, including replacing legacy VPN infrastructure and modernizing access controls.
Configure and tune Zscaler security features such as policy administration, SSL/TLS inspection, advanced threat protection, data loss prevention, and cloud-based traffic inspection.
Implement branch, cloud, and application connector architectures across on-premises and cloud environments, including AWS, Azure, and GCP.
Develop technical deliverables, solution designs, and client-facing guidance aligned to security, network transformation, and operational requirements.

Requirements

Ability to work autonomously and collaborate within a team.
Strong written and verbal communication skills.
High attention to detail and commitment to quality of work.
Ability to establish and maintain professional relationships.
Experience leading projects or workstreams.
Capacity to manage and prioritize multiple tasks in a fast-paced environment.
Strong interpersonal skills and professional demeanor.
Proven ability to meet deadlines.
Ability to provide clear guidance to team members.

Technologies

Zscaler Internet Access (ZIA)
Zscaler Private Access (ZPA)
Zero Trust Network Access (ZTNA)
VPN
SSL/TLS inspection
Advanced Threat Protection (ATP)
Data Loss Prevention (DLP)
Cloud-based traffic inspection
Amazon Web Services (AWS)
Microsoft Azure
Google Cloud Platform (GCP)
Zscaler Branch Connector
Zscaler Cloud Connector
Zscaler AI-powered capabilities
Digital Experience Monitoring (ZDX)
ZIdentity
Okta
Azure AD
Ping Identity
SAML/SCIM
Terraform
Ansible
Python
Splunk
Microsoft Sentinel
Palo Alto XSOAR
Zscaler APIs
VPCs
VNets
Transit Gateways

Benefits

Discretionary annual incentive program eligibility

The Team

Our Enterprise Security offering embeds security in all aspects of digital transformation by securing a client's technical backbone while enabling secure digital transformation. Includes security architecture, secure development and deployment, end-to-end cyber cloud capabilities, application security, and security for emerging technologies and connected products.

View full job page →

6d ago

Zscaler Network Security Engineer / Senior Consultant, Strategy, Growth, and Transformation

Deloitte San Diego, CA

San Diego, CA

6d ago

$105k - $208k/yr Full time Ai Security Cloud Architecture Cloud Platforms

Apply Now

Job Description

Deloitte's on-site opportunity in San Diego, CA invites senior security professionals to guide enterprise clients through modernizing their network defenses with cloud-delivered zero trust using Zscaler (ZIA and ZPA) across on‑premises and cloud environments. The role sits within Deloitte’s security practice, offering a competitive salary range of USD 105,400 to 207,800 per year and a discretionary annual incentive program.

Benefits

Discretionary annual incentive program

The Team

Our Enterprise Security offering integrates security across the full spectrum of digital transformation. The practice secures a client’s technical backbone while enabling secure innovation, covering security architecture, secure development and deployment, end-to-end cloud security capabilities, application security, and protection for emerging technologies and connected products.

Responsibilities

Design, deploy, and operate Zscaler Internet Access (ZIA) and Zscaler Private Access (ZPA) across large enterprise environments
Support zero trust network access transformations, including replacing legacy VPNs and modernizing access controls
Configure and optimize Zscaler security features such as policy administration, SSL/TLS inspection, advanced threat protection, data loss prevention, and cloud-based traffic inspection
Implement branch, cloud, and application connectors across on-premises and cloud platforms including AWS, Microsoft Azure, and Google Cloud Platform
Develop technical deliverables, solution designs, and client-facing recommendations aligned to enterprise security, network transformation, and operational requirements

Requirements

Ability to work independently and as part of a team
Effective written and verbal communication skills
Meticulous attention to detail and quality of work
Ability to build and sustain professional relationships
Ability to lead projects or workstreams
Capability to manage and prioritize multiple tasks in a fast-paced environment
Strong interpersonal skills and professional demeanor
Ability to meet deadlines and provide clear guidance to others
BA/BS degree in a technical field (e.g., Computer Science, Cyber Security, Information Technology, or equivalent experience)
Zscaler Digital Transformation Engineer (ZDTE) certification required
5+ years of progressively responsible experience in network security engineering
5+ years hands-on experience designing, deploying, and managing ZIA including web filtering, DNS security, cloud firewall, bandwidth controls, and ATP policies
5+ years hands-on experience designing, deploying, and managing ZPA including application segment configuration, access policies, connector deployment, and ZTNA architectures replacing legacy VPNs
1+ years experience designing, deploying, and managing Zscaler Branch Connector with BGP/static routing and network segmentation, replacing traditional SD-WAN
1+ years experience designing, deploying, and managing Zscaler Cloud Connector in cloud environments (AWS, Azure, and/or GCP) with workload-to-internet and workload-to-workload inspection, integrated with cloud-native networking constructs
3+ years configuring and tuning advanced security features such as Cloud Sandboxing, ATP, IPS, CBI, and DLP policies
3+ years implementing SSL/TLS inspection within ZIA, including certificate management and decryption policy design
1+ years experience with Zscaler AI-powered capabilities, including AI-driven policy recommendations and ZDX
3+ years defining, managing, and reviewing Zscaler security policies, including rule base optimization and RBAC in the Admin Portal
Experience implementing ZIdentity for centralized identity management
3+ years with one or more major cloud providers (AWS, GCP, Azure) to deploy ZPA App Connectors within cloud-native architectures
3+ years deploying Zscaler Cloud Connector
Experience integrating Zscaler with SIEM/SOAR platforms (e.g., Splunk, Microsoft Sentinel, Palo Alto XSOAR) via log streaming, API connectors, or syslog
Experience with Zscaler APIs and automation tooling (Terraform, Ansible, Python) for provisioning and policy management
Experience designing and presenting Zscaler solution architectures tailored to client requirements and communicating with executive and non-technical stakeholders
Familiarity with identity providers (Okta, Azure AD, Ping Identity) for SAML/SCIM authentication in ZIA and ZPA deployments
Ability to travel up to 50% as duties and client needs require
Limited immigration sponsorship may be available

Technologies

Zscaler Internet Access (ZIA), Zscaler Private Access (ZPA), ZTNA
SSL/TLS inspection, Advanced Threat Protection (ATP), Cloud Sandboxing
Intrusion Prevention (IPS), Cloud Browser Isolation (CBI), Data Loss Prevention (DLP)
Zscaler Branch Connector, Zscaler Cloud Connector
AI powered capabilities, Digital Experience Monitoring (ZDX)
ZIdentity, Terraform, Ansible, Python
SIEM/SOAR integrations (Splunk, Microsoft Sentinel, Palo Alto XSOAR)
Okta, Azure Active Directory, Ping Identity
AWS, Azure, Google Cloud Platform

View full job page →

8d ago

Cyber Zscaler Network Security Engineer / Senior Consultant, Strategy, Growth, and Transformation

Deloitte Austin, TX

Austin, TX

8d ago

$105k - $208k/yr Full time Analytics Cloud Cloud Architecture

Apply Now

Job Description

Deloitte is seeking a Cyber Zscaler Network Security Engineer / Senior Consultant to advance enterprise security through Zscaler cloud-delivered zero-trust architectures. This onsite role in Austin, TX focuses on the design, deployment, and optimization of ZIA and ZPA across both on premises and cloud environments. The position offers a salary range of USD 105,400 to 207,800 per year and requires a BA/BS degree in a technical field along with relevant experience.

Responsibilities

Design, deploy, and manage Zscaler Internet Access (ZIA) and Zscaler Private Access (ZPA) across enterprise client environments.
Support zero trust network access transformations by replacing legacy VPN infrastructure and modernizing access controls.
Configure and optimize Zscaler security features, including policy administration, SSL/TLS inspection, advanced threat protection, data loss prevention, and cloud-based traffic inspection.
Implement branch, cloud, and application connectors across on‑premises and cloud platforms such as AWS, Microsoft Azure, and Google Cloud Platform (GCP).
Develop technical deliverables, solution designs, and client-facing recommendations aligned to enterprise security, network modernization, and operational requirements.

Requirements

BA/BS degree in a technical field (e.g., Computer Science, Cyber Security, Information Technology) or equivalent work experience.
Zscaler Digital Transformation Engineer (ZDTE) certification is required.
5+ years of progressively responsible experience in network security engineering.
5+ years of hands-on experience designing, deploying, and managing ZIA, including web filtering, DNS security, cloud firewall, bandwidth controls, and advanced threat protection policies in enterprise environments.
5+ years of hands-on experience designing, deploying, and managing ZPA, including application segment configuration, access policies, connector deployment, and zero trust network access architectures replacing legacy VPNs.
1+ years of experience designing, deploying, and managing Zscaler Branch Connector, with knowledge of BGP/static routing and network segmentation to replace traditional SD-WAN platforms.
1+ years of experience designing, deploying, and managing Zscaler Cloud Connector in cloud environments (AWS, Azure, and/or GCP), including workload-to-internet and workload-to-workload traffic inspection and integration with cloud networking constructs.
3+ years of experience configuring and tuning advanced security features such as Cloud Sandboxing, Advanced Threat Protection, Intrusion Prevention, Cloud Browser Isolation, and Data Loss Prevention.
3+ years of experience implementing and troubleshooting SSL/TLS inspection within ZIA, including certificate management, decryption policy design, bypass rules, and handling certificate-pinned applications.
1+ years of experience with Zscaler AI-powered capabilities, including AI-driven policy recommendations and Digital Experience Monitoring (ZDX), plus leveraging AI/ML threat intelligence for automated responses.
3+ years of hands-on experience defining, managing, and reviewing Zscaler security policies, including rule base optimization, policy lifecycle management, access reviews, and RBAC in the Zscaler Admin Portal.
Experience implementing ZIdentity for centralized identity management.
3+ years of experience with one or more major cloud providers (AWS, GCP, Azure) to deploy ZPA App Connectors within cloud-native architectures.
3+ years of experience deploying Zscaler Cloud Connector.
Experience integrating Zscaler with SIEM/SOAR platforms (e.g., Splunk, Microsoft Sentinel, Palo Alto XSOAR) via log streaming, API connectors, or syslog for threat detection and incident response workflows.
Experience with Zscaler APIs and automation tooling (Terraform, Ansible, Python) for provisioning, policy management, and configuration-as-code workflows.
Experience designing and presenting Zscaler solution architectures tailored to client requirements and translating technical concepts for executive and non-technical stakeholders.
Familiarity with identity provider integrations (Okta, Azure AD, Ping Identity) for SAML/SCIM-based authentication within ZIA and ZPA deployments.
Ability to travel up to 50 percent, depending on client engagement and project requirements.
Limited immigration sponsorship may be available.

Technologies

Zscaler Internet Access (ZIA)
Zscaler Private Access (ZPA)
Zscaler Branch Connector
Zscaler Cloud Connector
Zscaler AI-powered capabilities and ZDX
ZIdentity
AWS, Microsoft Azure, Google Cloud Platform (GCP)
Splunk, Microsoft Sentinel, Palo Alto XSOAR
Terraform, Ansible, Python
Okta, Azure AD, Ping Identity

Benefits

Discretionary annual incentive program eligibility

The Team

Our Enterprise Security offering integrates security across the digital transformation journey, safeguarding a client’s technical backbone while enabling secure modernization. The group encompasses security architecture, secure development and deployment practices, end-to-end cyber cloud capabilities, application security, and protection for emerging technologies and connected products.

View full job page →

8d ago

Cyber Zscaler Network Security Engineer / Senior Consultant, Strategy, Growth, and Transformation

Deloitte Costa Mesa, CA

Costa Mesa, CA

8d ago

$105k - $208k/yr Full time Cloud Cloud Architecture Cloud Platforms

Apply Now

Job Description

Join Deloitte's Cyber Enterprise Security team to help clients modernize their network security through cloud-delivered zero trust architectures and Zscaler deployments across both on-premises and cloud environments. This Senior Consultant role in Strategy, Growth, and Transformation focuses on translating security strategy into practical designs, delivering client-ready recommendations, and guiding transformational initiatives. The position is onsite in Costa Mesa, CA, with a salary range of USD 105,400 to 207,800 per year.

Responsibilities

Designing, deploying, and managing Zscaler Internet Access (ZIA) and Zscaler Private Access (ZPA) capabilities across enterprise client environments
Supporting zero trust network access (ZTNA) transformations, including replacement of legacy virtual private network (VPN) infrastructure and modernization of access controls
Configuring and optimizing Zscaler security features, including policy administration, SSL/TLS inspection, advanced threat protection, data loss prevention, and cloud-based traffic inspection
Implementing branch, cloud, and application connector architectures across on-premises and cloud environments, including AWS, Microsoft Azure, and Google Cloud Platform (GCP)
Developing technical deliverables, solution designs, and client-facing recommendations aligned to enterprise security, network transformation, and operational requirements

Requirements

Ability to work independently and collaborate as part of a team
Effective written and verbal communication skills
Meticulous attention to detail and quality of work product
Ability to build and sustain professional relationships
Ability to lead projects or workstreams
Ability to manage and prioritize multiple tasks in a fast-paced and dynamic environment
Strong interpersonal skills and professional demeanor
Ability to meet deadlines
Ability to provide clear guidance to others

Technologies

Zscaler Internet Access (ZIA), Zscaler Private Access (ZPA), Zscaler Branch Connector, Zscaler Cloud Connector, Zscaler AI-powered capabilities, Digital Experience Monitoring (ZDX)
SSL/TLS inspection, Cloud Sandboxing, Advanced Threat Protection (ATP), Intrusion Prevention (IPS), Cloud Browser Isolation (CBI), Data Loss Prevention (DLP)
Zscaler Admin Portal, ZIdentity, AWS, Microsoft Azure, Google Cloud Platform (GCP)
Okta, Azure AD, Ping Identity, SAML, SCIM, Splunk, Microsoft Sentinel, Palo Alto XSOAR
Terraform, Ansible, Python, Zscaler APIs

The Team

Our Enterprise Security offering embeds security in all aspects of digital transformation by securing a client's technical backbone while enabling secure digital transformation. It encompasses security architecture, secure development and deployment, end-to-end cyber cloud capabilities, application security, and security for emerging technologies and connected products.

View full job page →

9d ago

Zscaler Network Security Engineer / Senior Consultant, Strategy, Growth, and Transformation

Deloitte Los Angeles, CA

Los Angeles, CA

9d ago

$105k - $208k/yr Full time Cloud Architecture Cloud Platforms Consultant

Apply Now

Job Description

Senior Consultant in Deloitte's Cyber Enterprise Security group focused on modernizing network security with cloud-delivered zero trust architectures using Zscaler across on premise and cloud environments.

RESPONSIBILITIES

Design, deploy, and manage ZIA and ZPA capabilities across enterprise client environments
Support zero trust network access transformations, replacing legacy VPNs and updating access controls
Configure and optimize Zscaler security features including policy administration, SSL/TLS inspection, advanced threat protection, data loss prevention, and cloud-based traffic inspection
Implement branch, cloud, and application connectors across on‑premises and cloud setups (AWS, Azure, GCP)
Develop technical deliverables, solution designs, and client-facing recommendations aligned to security, network transformation, and operations requirements

REQUIREMENTS

BA/BS degree in a technical field (e.g., Computer Science, Cyber Security, Information Technology) or equivalent work experience
Zscaler Digital Transformation Engineer (ZDTE) certification is required
5+ years of progressively responsible experience in network security engineering
5+ years designing, deploying, and managing ZIA, including web filtering, DNS security, cloud firewall, bandwidth controls, and ATP/DLP policies in enterprise-scale environments
5+ years designing, deploying, and managing ZPA, including application segment configuration, access policies, connector deployment, and zero trust architectures replacing legacy VPNs
1+ years designing, deploying, and managing Zscaler Branch Connector with BGP/static routing and network segmentation to replace traditional SD-WAN platforms
1+ years designing, deploying, and managing Zscaler Cloud Connector in cloud environments (AWS, Azure, GCP) with workload-to-internet and workload-to-workload inspection and integration with VPCs, VNets, and Transit Gateways
3+ years configuring and tuning advanced Zscaler security features including Cloud Sandboxing, Advanced Threat Protection, IPS, Cloud Browser Isolation, and DLP policies
3+ years implementing and troubleshooting SSL/TLS inspection within ZIA, covering certificate management, decryption policy design, bypass rules, and handling certificate-pinned applications
1+ years working with Zscaler AI capabilities, including AI-driven policy recommendations, Digital Experience Monitoring (ZDX), and AI/ML threat intelligence for automated responses
3+ years defining, managing, and reviewing Zscaler security policies, including rule base optimization, policy lifecycle, access reviews, and RBAC in the Admin Portal
Experience implementing ZIdentity for centralized identity management
3+ years with one or more major cloud providers (AWS, GCP, Azure) to deploy ZPA App Connectors in cloud-native architectures
3+ years deploying Zscaler Cloud Connector
Experience integrating Zscaler with SIEM/SOAR platforms (e.g., Splunk, Microsoft Sentinel, Palo Alto XSOAR) via log streaming, API connectors, or syslog for threat detection and response workflows
Experience with Zscaler APIs and automation tooling (Terraform, Ansible, Python) for provisioning, policy management, and infrastructure-as-code workflows
Experience designing and presenting Zscaler architectures tailored to client requirements and communicating concepts to executives and non-technical stakeholders
Familiarity with identity provider integrations (Okta, Azure AD, Ping Identity) for SAML/SCIM-based authentication in ZIA and ZPA
Ability to travel up to 50 percent, depending on client engagement
Limited immigration sponsorship may be available

TECHNOLOGIES

Zscaler Internet Access (ZIA)
Zscaler Private Access (ZPA)
Zscaler Branch Connector
Zscaler Cloud Connector
ZDX
AWS, Microsoft Azure, Google Cloud Platform (GCP)
Terraform, Ansible, Python
Splunk, Microsoft Sentinel, Palo Alto XSOAR
Okta, Azure AD, Ping Identity
ZIdentity

BENEFITS

Discretionary annual incentive program

THE TEAM

Our Enterprise Security offering integrates security across digital transformation, safeguarding a client’s technical backbone while enabling secure, accelerated modernization. The practice spans security architecture, secure development and deployment, cloud security, application security, and security for emerging technologies and connected products.

PREFERRED QUALIFICATIONS

Advanced cybersecurity certifications such as CISSP, CCIE Security, CCNP Security, or GIAC equivalents (e.g., GPEN, GCSA)
Ability to conduct SASE vendor competitive analyses and advise clients on solution choices based on use cases (for example Zscaler vs. Palo Alto Prisma vs. Netskope)
Capability to perform Zero Trust Architecture assessments and develop roadmaps aligning Zscaler capabilities with NIST SP 800-207 or CISA Zero Trust Maturity Model frameworks
Previous consulting or Big 4 experience with a track record delivering enterprise network security or SASE transformation engagements

View full job page →

10d ago

Zscaler Network Security Engineer / Senior Consultant, Strategy, Growth, and Transformation

Deloitte Cincinnati, OH

Cincinnati, OH

10d ago

$105k - $208k/yr Full time Cloud Platform Cloud Platforms Cloud Solutions

Apply Now

Job Description

Role context: Senior Consultant focused on guiding clients through modernizing network security with cloud-delivered zero-trust architectures (ZIA and ZPA) across on‑premises and cloud environments within the Deloitte Cyber practice.

Location

Cincinnati, OH (onsite)

Compensation

USD 105,400 - 207,800 per year

Responsibilities

Design, deploy, and operate ZIA and ZPA capabilities across enterprise client environments
Lead zero trust network access transformations, including replacement of legacy VPN infrastructure and modernization of access controls
Configure and optimize Zscaler security features, including policy administration, SSL/TLS inspection, advanced threat protection, data loss prevention, and cloud‑based traffic inspection
Implement branch, cloud, and application connector architectures across on‑premises and cloud environments, including AWS, Azure, and GCP
Develop technical deliverables, solution designs, and client‑facing recommendations aligned to enterprise security, network transformation, and operational requirements

Requirements

BA/BS degree in a technical field (e.g., Computer Science, Cyber Security, Information Technology) or equivalent work experience
Zscaler Digital Transformation Engineer (ZDTE) certification required
5+ years of progressively responsible experience in network security engineering
5+ years of hands‑on experience designing, deploying, and managing ZIA, including web filtering, DNS security, cloud firewall, bandwidth controls, and advanced threat protection policies in enterprise environments
5+ years of hands‑on experience designing, deploying, and managing ZPA, including application segment configuration, access policies, connector deployment, and zero trust network access architectures replacing legacy VPN infrastructure
1+ years of experience designing, deploying, and managing Zscaler Branch Connector, and configuring BGP/static routing configurations and network segmentation, replacing traditional SD‑WAN platforms
1+ years of experience designing, deploying, and managing Zscaler Cloud Connector, including deployment within cloud environments (AWS, Azure, and/or GCP), workload‑to‑internet and workload‑to‑workload traffic inspection, and integration with cloud‑native networking constructs (VPCs, VNets, Transit Gateways)
3+ years of experience configuring and tuning Zscaler advanced security features, including Cloud Sandboxing, Advanced Threat Protection (ATP), Intrusion Prevention (IPS), Cloud Browser Isolation (CBI), and Data Loss Prevention (DLP) policies
3+ years of experience implementing and troubleshooting SSL/TLS inspection within ZIA, including certificate management, decryption policy design, bypass rules, and handling of certificate‑pinned applications
1+ years of experience with Zscaler AI-powered capabilities, including AI‑driven policy recommendations, Digital Experience Monitoring (ZDX), and leveraging Zscaler's AI/ML threat intelligence for automated threat response
3+ years of experience defining, managing, and reviewing Zscaler security policies, including rule base optimization, policy lifecycle management, access reviews, and RBAC within the Zscaler Admin Portal
Experience implementing ZIdentity for centralized identity management
3+ years of experience with one or more major cloud providers (AWS, GCP, Azure) to deploy ZPA App Connectors within cloud‑native architectures
3+ years of experience deploying Zscaler Cloud Connector
Experience integrating Zscaler with SIEM/SOAR platforms (e.g., Splunk, Microsoft Sentinel, Palo Alto XSOAR) via log streaming, API connectors, or syslog for threat detection and incident response workflows
Experience with Zscaler APIs and automation tooling (e.g., Terraform, Ansible, Python) for provisioning, policy management, and infrastructure‑as‑code workflows
Experience designing and presenting Zscaler solution architectures tailored to client requirements, translating technical concepts for executive and non‑technical stakeholders
Familiarity with identity provider integrations (Okta, Azure AD, Ping Identity) for SAML/SCIM‑based authentication within ZIA and ZPA deployments
Ability to travel up to 50% on average based on client assignments and industry served
Limited immigration sponsorship may be available
Ability to work independently and as part of a team, with effective written and verbal communication skills
Meticulous attention to detail and quality of work, ability to build and sustain professional relationships
Ability to lead projects or workstreams and manage multiple tasks in a fast‑paced environment

Technologies

Zscaler Internet Access (ZIA)
Zscaler Private Access (ZPA)
Zscaler Branch Connector
Zscaler Cloud Connector
AWS, Microsoft Azure, Google Cloud Platform (GCP)
Zscaler Digital Experience (ZDX)
Zscaler AI powered capabilities
Zscaler APIs
Terraform, Ansible, Python
Splunk, Microsoft Sentinel, Palo Alto XSOAR
Okta, Azure AD, Ping Identity
SAML/SCIM based authentication
VPCs, VNets, Transit Gateways
SSL/TLS inspection
Cloud Sandboxing, ATP, IPS, CBI, DLP
ZIdentity

The Team

Our Enterprise Security offering weaves security into every phase of digital transformation, protecting a client’s technical backbone while enabling secure innovation. The practice encompasses security architecture, secure development and deployment, end‑to‑end cyber cloud capabilities, application security, and protections for emerging technologies and connected products.

View full job page →

Zscaler Digital Experience Engineer Jobs

Cyber Zscaler Network Security Engineer / Senior Consultant, Strategy, Growth, and Transformation

Zscaler Network Security Engineer / Senior Consultant, Strategy, Growth, and Transformation

Zscaler Network Security Engineer / Senior Consultant, Strategy, Growth, and Transformation

Cyber Zscaler Network Security Engineer / Senior Consultant, Strategy, Growth, and Transformation

Cyber Zscaler Network Security Engineer / Senior Consultant, Strategy, Growth, and Transformation

Zscaler Network Security Engineer / Senior Consultant, Strategy, Growth, and Transformation

Zscaler Network Security Engineer / Senior Consultant, Strategy, Growth, and Transformation

Get Zscaler Digital Experience Engineer Jobs alerts