Zero Trust Security Engineer

Position summary

Operate and improve enterprise Zero Trust access services that connect remote and on-site users to private applications and cloud services across hybrid, multi-cloud environments. Administer Zscaler ZPA/ZIA and connectors, integrate enterprise identity providers and MFA, and troubleshoot production access issues involving policies, authentication, device posture, DNS, TLS, and application connectivity.

Must be eligible to obtain a Public Trust Clearance.

Key responsibilities

·       Configure and support Zscaler ZPA/ZIA, application segments, access policies, App Connectors, Cloud Connectors, and Client Connector integrations as applicable.

·       Integrate SAML/OIDC identity providers, SSO/MFA, identity groups and attributes with access enforcement policies.

·       Onboard private applications and users; validate authentication, authorization, DNS, TLS, application ports, and end-to-end connectivity.

·       Triage access denials, connector outages, authentication errors, certificate failures, and policy conflicts; document root causes and fixes.

·       Maintain runbooks, configuration baselines, logs, change records, and on-call incident support.

Required skills and experience

·       7+ years in network security, ZTNA, identity security, or enterprise security operations.

·       Production administration and troubleshooting of Zscaler ZPA/ZIA strongly preferred; comparable ZTNA experience considered when paired with Zscaler expertise.

·       Hands-on knowledge of SAML 2.0, OIDC/OAuth 2.0, Microsoft Entra ID or Okta, SSO, MFA, and identity troubleshooting.

·       Solid TCP/IP, DNS, HTTP/S, TLS, firewall, routing, and application connectivity troubleshooting skills.

·       Experience with SIEM/log analysis, change control, escalation, and production incident restoration.

Preferred qualifications

Preferred: Zscaler product training/certifications; experience with PowerShell/Python, service APIs, and cloud applications.