Zscaler Engineer

Responsibilities:

• Administer and maintain Zscaler services, including ZIA, ZPA, SAML integrations, policy tuning, and digital experience monitoring.
• Perform day-to-day operational tasks such as policy updates, system monitoring, health checks, and issue resolution.
• Create, maintain, and improve SOPs and technical documentation related to Zscaler administration.
• Monitor Zscaler dashboards and alerts to ensure service availability and user experience quality.
• Support integration of Zscaler with Microsoft technologies (e.g., Azure AD, Conditional Access).
• Respond to ServiceNow tickets and data calls; document troubleshooting efforts and escalate issues as needed.
• Collaborate with security teams to enforce policies related to secure web gateway, CASB, DLP, firewall, and web proxies.
• Assist in onboarding users and optimizing configuration of Zscaler client connectors.
• Coordinate threat intelligence activities to enhance policy decisions and threat mitigation.
• Participate in patching, upgrades, and testing to ensure optimal service performance.
• Support limited integration tasks with tools such as CrowdStrike and other endpoint protection platforms.

Qualifications

Requirements:

• Bachelor’s degree in IT, Cybersecurity, or related field; or equivalent hands-on experience.
• 2–5 years of relevant experience supporting enterprise network or cloud security systems.
• Hands-on experience administering Zscaler Internet Access (ZIA) and/or Zscaler Private Access (ZPA).
• Familiarity with key security technologies: secure web gateway, CASB, DLP, web proxy, firewall, antivirus, sandboxing.
• Experience integrating SASE or cloud security solutions with identity providers such as Azure Active Directory.
• Strong troubleshooting skills and ability to diagnose connectivity or policy issues.
• Excellent written and verbal communication skills.

Preferred Qualifications:

• Experience supporting security in a federal agency environment.
• Exposure to Zero Trust architecture principles or implementation efforts.
• Familiarity with CrowdStrike, Intune, Office 365, and Microsoft Defender suite.
• Relevant certifications (e.g., Zscaler Certified Administrator, Security+, Microsoft SC-300).

Clearance Requirement:

All candidates must be eligible to obtain a U.S. Public Trust Clearance.

**This hybrid role requires a minimum of three on-site days per week in Washington, DC.**