Zscaler Security Engineer

The role is for a Zscaler Security Engineer supporting Zero Trust security delivery across enterprise environments. You will design, deploy, and operate Zscaler solutions, provide Level 3 escalation for critical incidents, and collaborate with cross-functional teams to maintain secure and resilient access for users and applications.

Key Responsibilities

• Deploy and manage Zscaler ZIA, Zscaler ZPA, and Zscaler ZDX for large enterprise deployments.
• Design and optimize security policies including SSL Inspection, URL Filtering, Sandbox, Access & Timeout Policies, and Client Forwarding.
• Support Zscaler migration and integration with Workspace ONE and MDM platforms.
• Deploy and manage ZPA App Connectors in data centers and cloud environments, with AWS preferred.
• Manage ZCC agent profiles, including configuration updates and rollout strategy.
• Maintain SSL Inspection Exemption lists for certificate-pinned applications.
• Support development and monitoring of DLP policies.
• Perform L3 to L7 troubleshooting using tools such as Wireshark, tcpdump, MTR, and Zscaler Analyzer logs including ZSATunnel and ZSATray.
• Use ZDX and other Zscaler diagnostics to analyze latency and performance issues.
• Serve as a Level 3 escalation point for P1/P2 incidents, coordinating with Zscaler TAMs and Support.
• Manage Zscaler-related tickets and escalations in ServiceNow.
• Collaborate with infrastructure, cloud, network, and security teams.
• Create and maintain SOPs, documentation, and knowledge articles.

Required Qualifications

• BS/MS in Computer Science or a related area, or equivalent relevant experience.
• 8+ years experience in network security, cloud security, or Zero Trust.
• Strong hands-on expertise with ZIA, ZPA, ZDX, and ZCC (mandatory).
• Solid understanding of TCP/IP, DNS, HTTP/HTTPS, TLS/SSL, Proxy architecture, authentication (SAML/AD), and IPSec/GRE.
• Proficiency in packet analysis using Wireshark and tcpdump.
• Experience with AWS and/or GCP with networking fundamentals.
• Strong analytical and problem-solving mindset with the ability to approach issues creatively.
• Experience with Software Development Lifecycle Process such as Agile Development and SCRUM methodologies.
• Strong stakeholder communication with leadership and cross-functional teams.
• Ability to work independently and lead problem-solving efforts.
• Excellent troubleshooting and documentation skills.
• Ability to work under pressure in fast-paced enterprise environments.

Technologies

• Zscaler ZIA, Zscaler ZPA, Zscaler ZDX, Zscaler ZCC
• Workspace ONE, MDM, ZPA App Connectors
• Wireshark, tcpdump, MTR
• Zscaler Analyzer, ZSATunnel, ZSATray
• ServiceNow
• SSL Inspection, URL Filtering, Sandbox, Client Forwarding
• DLP, ZDX diagnostics
• TCP/IP, DNS, HTTP/HTTPS, TLS/SSL, Proxy architecture
• SAML, AD, IPSec/GRE
• AWS, GCP

Location, Employment Type, and Education

• Location: Mountain View, CA / San Diego, CA / Plano, TX (hybrid)
• Job Type: contract
• Minimum Experience: 8 years
• Education: BS/MS in Computer Science or related area

Benefits

• Flexible work from home options available.