Lead Infrastructure Security Engineer – Zscaler

About the role

We are seeking a Security Engineer with intermediate to advanced hands-on experience in Zscaler ZPA (Zscaler Private Access) and ZDX (Zscaler Digital Experience) to help design, implement, and support secure, high-performance access to applications and services.

Responsibilities

• Design, deploy, and maintain Zscaler ZPA (Z Scaler Private Access) for secure, zero-trust access to internal applications and hybrid-cloud environments.
• Configure and optimize ZDX (Z Scaler Digital Experience) to monitor, analyze, and improve end-user digital experience.
• Configure and optimize ZCC (Z Scaler Client Connector) for secure conditional access, posture assessment, to ensure device identification consistent with zero trust controls.
• Troubleshoot application access, performance, and connectivity issues using Zscaler tools and logs.
• Partner with network, security, and application teams to onboard new applications into ZPA.
• Auxiliary in policy creation, segmentation, and access controls aligned with Zero Trust principles.
• Analyze ZDX data to identify root causes of user experience issues and recommend improvements.
• Support ongoing operational needs, upgrades, and best-practice improvements.
• Document designs, configurations, and operational procedures.

Requirements

• Proven hands-on experience with Zscaler ZPA in a production environment.
• Experience using Zscaler ZDX for monitoring and troubleshooting user experience.
• Familiarity with identity providers (Entra / Azure AD, Okta, etc.).
• Experience migrating from traditional VPNs to ZPA.
• Experience troubleshooting complex network and application performance issues.
• Ability to work independently and collaborate across technical teams.

Skills & Expertise You Bring

• Zscaler certifications (ZPA, ZDX, or Zscaler Internet Access) preferred.
• Scripting or automation experience (PowerShell, Python, etc.) preferred.
• Experience with cloud platforms (AWS, Azure) preferred.
• Application connectivity (web client/server) troubleshooting preferred.