Zscaler Integration Engineer, MID

We need to output HTML fragment with sections: About the role (position summary), Responsibilities, Requirements (maybe Qualifications), Skills? The posting includes Position Summary, Key Responsibilities, Required Qualifications, Preferred Qualifications, Preferred Certifications, Core Competencies, Compensation. Also Location, Work Schedule, Employment Type, Clearance, Salary Range. We must not repeat job title as heading. Use

for section headings: About the role, Responsibilities, Requirements, Qualifications, Skills, Benefits, Pay, Schedule. We need to include sections only when posting has real specific content. So we need to decide which sections to include. We have: - About the role: Position Summary (the paragraph after "Position Summary"). - Responsibilities: Key Responsibilities (multiple bullet points). We'll need to put each bullet as

inside

. - Requirements: Could be Required Qualifications (education, experience). Also maybe include Clearance? The clearance is a requirement: "Suitability Determination and ability to obtain the required Government background investigation and IT access". That's a requirement. Also maybe include Work Schedule? That's schedule. - Qualifications: Could be Preferred Qualifications? But we already have Requirements. The instruction says use headings: About the role, Responsibilities, Requirements, Qualifications, Skills, Benefits, Pay, Schedule. So we need to map content accordingly. We have Required Qualifications (education, experience). That could go under Requirements. We have Preferred Qualifications (additional experience). Could go under Qualifications? Or maybe Skills? The instruction says we can have Qualifications section for preferred qualifications? Not sure. But we can include Qualifications for preferred qualifications. Skills: Could be Core Competencies (list of competencies). Also maybe include specific technical skills from responsibilities? But we can put Core Competencies under Skills. Pay: Salary Range: $100,000 – $125,000 annually. Also compensation description. So we can put Pay section. Schedule: Work Schedule: Full-Time, Remote, On-site on occasion. Also Employment Type: Full-Time. So we can put Schedule section. Benefits: Not mentioned. So we should not include Benefits section. We must not include headings with filler text. So we will include only those sections with real content. We need to preserve all substantive information, not invent or summarize away detail. So we need to include all details from the posting, but we can format them as lists or paragraphs. We must remove boilerplate: cookie/navigation/legal/EEO/equal-opportunity/scam-warning boilerplate, duplicated lines, and application instructions. The posting includes an EEO statement at the end; we must remove that. Also maybe "Equal Employment Opportunity" paragraph. Remove. Also we need to drop Job ID/requisition numbers (none present). Also remove duplicated lines. We need to keep location, work schedule, employment type, clearance, salary range, position summary, responsibilities, required qualifications, preferred qualifications, preferred certifications, core competencies, compensation details. We need to ensure we don't lose any detail. Let's extract content: Location: Washington, DC Work Schedule: Full-Time, Remote, On-site on occasion Employment Type: Full-Time Clearance: Suitability Determination and ability to obtain the required Government background investigation and IT access Salary Range: $100,000 – $125,000 annually Position Summary paragraph: "Digital Global Connectors (DGC) is seeking a Zscaler Integration Engineer, MID to support the engineering, implementation, administration, and continuous improvement of enterprise Zscaler security infrastructure within a Federal Government IT environment. The Zscaler Integration Engineer will work as part of a network and cybersecurity engineering team supporting Zscaler Internet Access (ZIA), Zscaler Private Access (ZPA), Zscaler Client Connector, Zscaler Digital Experience (ZDX), and associated security and identity technologies. The engineer will collaborate with network engineers, cybersecurity engineers, cloud operations teams, identity and access management specialists, and Government stakeholders to deliver secure, reliable, and compliant cloud-delivered security capabilities. The ideal candidate has hands-on Zscaler experience, strong networking fundamentals, knowledge of SASE and Zero Trust Network Access (ZTNA), and experience supporting cybersecurity operations within enterprise or Federal IT environments." Key Responsibilities: It's a long list with many bullet-like sentences. We need to convert each sentence into
• . The responsibilities are grouped under headings: Zscaler Internet Access (ZIA), Zscaler Private Access (ZPA), Zscaler Client Connector, Zscaler Digital Experience (ZDX), Identity & Access Management Integration, Security Operations, Change Management & Documentation, Federal Cybersecurity Compliance & ATO. We need to preserve all bullet points. We'll need to split each sentence that ends with a period. Some sentences have multiple clauses separated by commas but still one responsibility. We'll treat each line that starts with a capital letter after a line break as a bullet. The original text uses line breaks and indentation. We'll replicate. Let's copy responsibilities exactly as given, but convert to
• . Responsibilities block: "Zscaler Internet Access (ZIA) Engineer, configure, administer, and troubleshoot Zscaler Internet Access (ZIA) capabilities. Configure and maintain URL filtering, application control, SSL/TLS inspection, and advanced threat-protection policies. Configure and support ZIA traffic forwarding using Zscaler Client Connector, GRE tunnels, IPsec tunnels, and PAC files. Assist with implementation and maintenance of Data Loss Prevention (DLP) and Cloud Access Security Broker (CASB) capabilities. Manage SSL/TLS inspection configurations, certificate trust, and policy exceptions. Monitor ZIA platform health, traffic processing, security-policy enforcement, and performance. Perform policy reviews, rule optimization, and exception management. Analyze ZIA traffic, security, threat-prevention, and URL-filtering logs. Troubleshoot connectivity, policy-enforcement, and performance issues." "Zscaler Private Access (ZPA) Engineer, configure, and administer Zscaler Private Access (ZPA) capabilities. Configure application segments, server groups, and application-specific access controls. Deploy, configure, monitor, and troubleshoot ZPA App Connectors across on-premises and cloud environments. Develop and maintain ZPA access policies using identity, device posture, MFA, and other contextual access controls. Support integration with identity providers including Microsoft Entra ID and Okta. Configure and troubleshoot SAML and SCIM integrations. Monitor ZPA availability, App Connector health, access sessions, and policy enforcement. Troubleshoot user-access, connectivity, and policy issues. Analyze ZPA access logs and reports to support security monitoring and compliance activities." "Zscaler Client Connector Administer and maintain Zscaler Client Connector across enterprise endpoints. Support Client Connector deployment, configuration, and health monitoring. Configure and maintain forwarding profiles, application profiles, and security-policy configurations. Monitor endpoint deployment coverage and identify agent connectivity or configuration issues. Support integration with enterprise endpoint-management technologies. Troubleshoot Client Connector connectivity and functionality issues." "Zscaler Digital Experience (ZDX) Support administration and monitoring of Zscaler Digital Experience (ZDX). Monitor application performance, user digital experience, and network-path health. Identify and troubleshoot user-experience and application-performance issues. Assist with configuration of application-performance probes and alert thresholds. Develop ZDX operational and performance reports." "Identity & Access Management Integration Support integration of Zscaler technologies with enterprise identity and access management platforms. Configure and troubleshoot SAML, OIDC, and SCIM integrations. Support Microsoft Entra ID and/or Okta integrations. Monitor identity-provider and directory-synchronization health. Support implementation and troubleshooting of MFA requirements. Assist with identity-aware Zero Trust access-policy enforcement." "Security Operations Monitor Zscaler security events, threat-prevention alerts, and DLP policy violations. Perform initial analysis and triage of security events. Support integration of Zscaler telemetry with enterprise SIEM capabilities. Assist with development and tuning of Zscaler-specific security detections. Support threat-intelligence-driven URL, IP reputation, and security-policy configurations. Assist incident-response teams with Zscaler log analysis, investigation, containment, and remediation. Identify false positives, emerging threat patterns, and security-policy tuning opportunities." "Change Management & Documentation Prepare Zscaler change requests for Change Advisory Board (CAB) review. Develop implementation plans, technical impact assessments, testing procedures, and rollback plans. Execute approved configuration changes in accordance with established change-management procedures. Conduct post-implementation testing and document results. Develop and maintain Zscaler runbooks, troubleshooting guides, security-policy documentation, and Standard Operating Procedures (SOPs). Maintain accurate configuration records, change logs, and operational documentation." "Federal Cybersecurity Compliance & ATO Support operation of Zscaler technologies in accordance with applicable Federal cybersecurity requirements. Support compliance with NIST SP 800-53, FISMA, FedRAMP, NIST SP 800-207 Zero Trust Architecture, applicable OMB requirements, and customer-specific cybersecurity requirements. Assist with ATO activities, including security-control implementation documentation, SSP contributions, continuous-monitoring evidence, and audit artifacts. Support configuration-compliance assessments. Identify and assist with remediation of configuration deviations and security gaps. Support vulnerability tracking and remediation activities associated with Zscaler technologies." We need to ensure we don't lose any. Now Required Qualifications: "Bachelor's degree in Computer Science, Information Technology, Cybersecurity, Network Engineering, or a related field. An equivalent combination of education and directly relevant professional experience may be considered. 3–5 years of hands-on experience in network security engineering, cloud security, cybersecurity engineering, or a closely related discipline. At least 2–3 years of hands-on experience engineering and administering Zscaler ZIA and/or ZPA in an enterprise environment. Demonstrated experience configuring and administering ZIA security policies, including: URL filtering SSL/TLS inspection Application control Threat prevention Demonstrated experience with ZPA, including: Application segments App Connectors Access-policy development Strong understanding of Secure Access Service Edge (SASE) and Zero Trust Network Access (ZTNA) principles. Familiarity with Zscaler Client Connector deployment and administration. Knowledge of identity-provider integration using SAML, OIDC, and SCIM. Solid enterprise networking knowledge, including: TCP/IP DNS Routing GRE tunneling IPsec Traffic-forwarding architectures Strong troubleshooting and root-cause-analysis skills. Experience working within formal enterprise change-management processes. Strong written and verbal communication skills. Ability to develop clear technical documentation and communicate effectively with technical and non-technical stakeholders. Suitability Determination and ability to obtain and maintain the Government background investigation, clearance, and IT access required for the position." We need to preserve bullet lists for sub-items. Preferred Qualifications: "Previous Zscaler engineering or administration experience supporting a Federal Government contract or Federal IT program. Experience with Zscaler Digital Experience (ZDX). Experience with Zscaler DLP and CASB capabilities. Experience with Microsoft Entra ID and/or Okta. Experience configuring SAML applications, Conditional Access, and SCIM provisioning. Experience integrating Zscaler telemetry with SIEM platforms. Experience with Cloud NSS feeds and Zscaler log-source onboarding. Experience supporting AWS and/or Microsoft Azure Government environments. Familiarity with Zscaler Posture Control. Familiarity with MITRE ATT&CK. Experience supporting cybersecurity incident response. Experience supporting ATO and FedRAMP continuous-monitoring activities. Basic scripting experience using Python, PowerShell, or Bash. Experience using Zscaler APIs for automation or configuration management." Preferred Certifications: "One or more of the following certifications is preferred: Zscaler Certified Cloud Professional (ZCCP) – ZIA Zscaler Certified Cloud Professional (ZCCP) – ZPA Zscaler Certified Cloud Administrator (ZCCA) – ZIA or ZPA CompTIA Security+ CompTIA Network+ CISSP Microsoft SC-900 Microsoft SC-300 Other relevant Zscal