Zero Trust Security Engineer

Job Description

Position summary

\n

Operate and improve enterprise Zero Trust access services that connect remote and on-site users to private applications and cloud services across hybrid, multi-cloud environments. Administer Zscaler ZPA/ZIA and connectors, integrate enterprise identity providers and MFA, and troubleshoot production access issues involving policies, authentication, device posture, DNS, TLS, and application connectivity.

\n

\n

Must be eligible to obtain a Public Trust Clearance.

\n

\n

Key responsibilities

\n

·       Configure and support Zscaler ZPA/ZIA, application segments, access policies, App Connectors, Cloud Connectors, and Client Connector integrations as applicable.

\n

·       Integrate SAML/OIDC identity providers, SSO/MFA, identity groups and attributes with access enforcement policies.

\n

·       Onboard private applications and users; validate authentication, authorization, DNS, TLS, application ports, and end-to-end connectivity.

\n

·       Triage access denials, connector outages, authentication errors, certificate failures, and policy conflicts; document root causes and fixes.

\n

·       Maintain runbooks, configuration baselines, logs, change records, and on-call incident support.

\n

\n

\n

Required skills and experience

\n

·       7+ years in network security, ZTNA, identity security, or enterprise security operations.

\n

·       Production administration and troubleshooting of Zscaler ZPA/ZIA strongly preferred; comparable ZTNA experience considered when paired with Zscaler expertise.

\n

·       Hands-on knowledge of SAML 2.0, OIDC/OAuth 2.0, Microsoft Entra ID or Okta, SSO, MFA, and identity troubleshooting.

\n

·       Solid TCP/IP, DNS, TLS, firewall, routing, and application connectivity troubleshooting skills.

\n

·       Experience with SIEM/log analysis, change control, escalation, and production incident restoration.

\n

\n

\n

Preferred qualifications

\n

Preferred: Zscaler product training/certifications ; experience with PowerShell/Python, service APIs, and cloud applications.