Zero Trust Security Engineer

Position summary

Operate and improve enterprise Zero Trust access services that connect remote and on-site users to private applications and cloud services across hybrid, multi-cloud environments. Administer Zscaler ZPA/ZIA and connectors, integrate enterprise identity providers and MFA, and troubleshoot production access issues involving policies, authentication, device posture, DNS, TLS, and application connectivity.

Must be eligible to obtain a Public Trust Clearance.

Key responsibilities

· Configure and support Zscaler ZPA/ZIA, application segments, access policies, App Connectors, Cloud Connectors, and Client Connector integrations as applicable.

· Integrate SAML/OIDC identity providers, SSO/MFA, identity groups and attributes with access enforcement policies.

· Onboard private applications and users; validate authentication, authorization, DNS, TLS, application ports, and end-to-end connectivity.

· Triage access denials, connector outages, authentication errors, certificate failures, and policy conflicts; document root causes and fixes.

· Maintain runbooks, configuration baselines, logs, change records, and on-call incident support.

Required skills and experience

· 7+ years in network security, ZTNA, identity security, or enterprise security operations.

· Production administration and troubleshooting of Zscaler ZPA/ZIA strongly preferred; comparable ZTNA experience considered when paired with Zscaler expertise.

· Hands-on knowledge of SAML 2.0, OIDC/OAuth 2.0, Microsoft Entra ID or Okta, SSO, MFA, and identity troubleshooting.

· Solid TCP/IP, DNS, TLS, firewall, routing, and application connectivity troubleshooting skills.

· Experience with SIEM/log analysis, change control, escalation, and production incident restoration.

Preferred qualifications

Preferred: Zscaler product training/certifications; experience with PowerShell/Python, service APIs, and cloud applications.