Cyber Security Engineer - Zscaler

Key Accountabilities/Deliverables

• Configure, implement, and maintain Zscaler ZIA and ZPA environments to protect user access and data.
• Manage policies related to web filtering, SSL inspection, DLP, and threat protection.
• Integrate Zscaler services with identity providers such as Azure AD or Okta for single sign-on and access control.
• Monitor and tune security policies to balance user experience with effective threat prevention.
• Collaborate with network and endpoint teams to ensure consistent security enforcement across all platforms.
• Conduct performance analysis and troubleshoot traffic routing, latency, or authentication issues within the Zscaler environment.
• Partner with the SOC and incident response teams to investigate and contain security events involving Zscaler logs or alerts.
• Provide documentation, configuration standards, and operational runbooks for Zscaler deployments.
• Participate in change management reviews and security assessments for new applications and network integrations.
• Stay current with emerging threats, zero-trust architecture models, and Zscaler platform updates.

Technical Knowledge and Understanding

• Familiarity with automation and API-based integrations for policy management.
• Working knowledge of identity and access management, cloud security, and zero-trust principles.
• Strong knowledge of network protocols, DNS, SSL/TLS, VPN, and proxy architecture.

Experience

• Bachelor’s degree in Computer Science, Cybersecurity, or related field (or equivalent experience) required.
• 3+ years of hands-on experience administering and troubleshooting Zscaler ZIA/ZPA in an enterprise environment.
• Experience integrating Zscaler with SIEM and endpoint security platforms.
• Background in regulated industries such as insurance, banking, or healthcare preferred.
• Certifications such as Zscaler Certified Cloud Professional (ZCCP), Zscaler Certified Cloud Administrator (ZCCA), or equivalent.
• Experience with Microsoft Defender, Sentinel, or other security orchestration tools preferred.