Senior Zscaler Security Engineer
Employment Information
Report this job
Job expired or something wrong with this job?
Job Description
Senior Zscaler Security Engineer operating and expanding Zscaler Zero Trust environments for federal agencies. Integrating security, identity, monitoring, and service-management platforms.
Responsibilities:
- Lead and support implementation of Zero Trust security controls, primarily Zscaler and its integration with enterprise network, identity, device, application, data, and visibility capabilities
- Configure and integrate ZPA, ZIA, Client Connector, Cloud Firewall, Branch Connector, and related network-security controls
- Conduct risk assessments, identify vulnerabilities, and develop proactive mitigation strategies
- Review architectures, integrations, designs, and change requests for alignment with federal requirements, Zero Trust principles, and approved enterprise security architecture
- Administer and optimize ZIA, ZPA, ZDX, Zidentity, Client Connector, Sandbox, SSL Inspection, Cloud Firewall, URL Filtering, and related Zscaler services
- Review configurations against vendor-recommended and DHS/HQ baselines; document deviations, risks, and remediation recommendations
- Design and implement policies for web access, application access, traffic forwarding, SSL/TLS inspection, sandboxing, threat protection, file handling, and user/device-based controls
- Analyze rule order, policy dependencies, bypasses, exclusions, and catch-all behavior
- Develop and execute phased implementation, testing, rollback, and validation plans for production changes
- Troubleshoot Client Connector, authentication, traffic forwarding, application access, policy enforcement, certificates, SSL inspection, and integration issues
- Align Zscaler deployments with the CISA Zero Trust Maturity Model and organizational Zero Trust strategies
- Integrate Zscaler with endpoint security, vulnerability management, infrastructure monitoring, identity, SIEM/SOAR, and ITSM platforms
- Integrate Zscaler with cloud storage and collaboration platforms to enforce secure data access and sharing
- Document and address information security, cybersecurity architecture, and systems security engineering requirements throughout the acquisition life cycle
- Participate in security reviews, identify architecture gaps, and develop security risk management plans
- Advise stakeholders on security modernization, cloud migration, and risk reduction
- Conduct gap analyses and develop actionable roadmaps for security capability uplift
- Provide architectural guidance and mentor technical teams on Zscaler and integrated security solutions
- Work with federal stakeholders, network and security teams, service desk, DHS headquarters, and technology vendors
Requirements:
- 10+ years of cybersecurity, network-security, or Zero Trust engineering experience, including experience in federal, public-sector, or similarly regulated environments
- 3+ years of substantial hands-on experience administering, configuring, and troubleshooting Zscaler capabilities, particularly ZIA and ZPA
- Demonstrated experience with Zscaler policy design, rule ordering, SSL/TLS Inspection, sandboxing, traffic forwarding, URL filtering, application access, certificates, and Client Connector
- Experience implementing production changes through documented testing, approvals, rollback planning, validation, and change control
- Experience with REST APIs and scripting languages such as Python or PowerShell
- Excellent communication skills to internal and external stakeholders and ability to adjust messaging to varied audiences
- Consultative mindset and ability to map solutions against client challenges
- BA/BS degree or equivalent experience
- Must be a US Citizen and able to obtain a US Government security clearance/public trust
- Preferred: Zscaler Certified Cloud Professional (ZCCP), Zscaler Certified Cloud Administrator (ZCCA), CISSP, CISM, CCSP, Azure Security Specialty
- Preferred: Experience in federal government or regulated industry environments
- Preferred: Knowledge of secure cloud adoption frameworks and hybrid environment security
- Preferred: Experience with GitLab or comparable source-control and CI/CD tooling
- Preferred: Familiarity with Jira and Confluence for work tracking, technical documentation, and lifecycle management
- Preferred: Experience creating operational dashboards, alerting workflows, runbooks, and security-response procedures
Similar Jobs
Senior Security Advisor – Lead Control Assessor
Senior Security Advisor leading NIST 800-53 cybersecurity control assessments for Soteria’s clients. Coordinating assessors, validating evidence, and presenting findings to executives and boards.
Senior Staff AI Security Lead
Senior Staff AI Security Lead building secure LLM infrastructure and driving AI adoption across IonQ’s quantum computing security organization. Delivering production AI systems, governance, and measurable analyst productivity gains.
Senior Product Security Engineer
Product Security Engineer securing Close’s AI-powered CRM across applications, APIs, cloud infrastructure, and integrations. Building vulnerability management, security automation, and incident-response capabilities.
Principal Linux Security Engineer
Principal Linux Security Engineer securing CIQ’s enterprise Linux distributions and infrastructure. Building compliance profiles, security tooling, errata, and CVE assessments for demanding workloads.
Information Security and Governance Analyst, Mid-Level
Analista de Governança e Segurança da Informação apoiando auditorias, riscos e controles na Monkey. Empresa de tecnologia financeira que simplifica transações entre grandes empresas e fornecedores.
Security Engineer IV
Security Engineer IV leading AI/LLM security, cloud controls, compliance, and incident investigations. Rackspace Technology operates enterprise AI infrastructure for regulated and mission-critical customers.
Regional Sales Director, Identity Security
Regional Sales Director leading Mid-Atlantic and TOLA sales teams for Cyera’s AI security platform. Driving territory growth, enterprise deals, coaching, and quota achievement.
Security Engineer
Security Engineer operating Firmable’s SOC 2 and ISO 27001 security controls. Managing AWS cloud security, vulnerabilities, access, monitoring, audits and incident response remotely.
AVP, Cyber Application Security Architect
Cyber application security architect securing SaaS, cloud infrastructure, and software development lifecycles. Driving secure-by-design reviews, DevSecOps, threat modeling, and AI/ML security guidance.
Senior Cybersecurity Disaster Recovery, Contingency Planning SME
Cybersecurity DRCP SME leading nationwide BIA, DRP, and contingency planning programs. Supporting government agencies in strengthening national security and improving public services.
Cloud Specialist – Security SSR
Cloud Security Specialist securing AWS infrastructure for major Latin American companies. Designing AWS governance, network protection, compliance, automation, and incident remediation.
Senior Cybersecurity Architect
Senior Cybersecurity Architect governing Zero Trust, AWS, DevSecOps, and AI security architecture. Reducing cyber risk across HomeServe’s home-services technology and integrations.
Senior Cybersecurity Engineer
Senior Cybersecurity Engineer securing HomeServe’s enterprise systems, infrastructure, and business operations. Leading risk assessments, security architecture, incident response, compliance, and cybersecurity innovation.
AWS Cloud Security Engineer
AWS Cloud Security Engineer securing Peraton’s FedRAMP-authorized AWS infrastructure. Implementing cloud controls, continuous compliance, and ATO support for national security missions.
Security Engineer – CrowdStrike Falcon
Senior CrowdStrike CNAPP engineer configuring cloud, Kubernetes, and container security for a cybersecurity consulting firm. Securing government and enterprise environments through hands-on Falcon implementation.
Technical Advisor II – Food Security, Livelihoods and Markets
Remote CRS technical advisor leading Sudan’s World Bank-funded Food and Nutrition Security Plan. Advising global food security, livelihoods, and market-based humanitarian programming.
Manager, Application Security, SOX
Application Security and SOX Manager securing Oracle Fusion, EPM, and OIC environments. Ensuring access governance, Segregation of Duties, and compliance for Paramount’s global media business.
Senior Manager, Application and Pipeline Security
Senior Manager leading Nielsen’s application and pipeline security for its media insights business. Driving AWS governance, AI-driven DevSecOps, automated remediation, and security engineering team performance.
Senior Security Engineer
Senior Security Engineer monitoring and responding to threats across Cision’s cloud, identity, endpoint, and Linux environments. Cision provides PR, marketing, and social media management technology.
Information Security Control Assurance Analyst
Information security analyst assuring controls, audits, and compliance for Southern New Hampshire University. Managing risk assessments, SSPs, POA&Ms, audits, and governance reporting remotely.