Zscaler Security Engineer

Zscaler Security Engineer
Remote | Long-term / ongoing

This role is for someone who enjoys being the calm, capable brain behind modern cloud security. You ll be helping shape and run a Zero Trust environment that actually works in the real world not just on architecture diagrams. If you like tightening security without breaking user access, digging into traffic flows, and making smart policy decisions that scale, you ll feel right at home here.

You ll spend your time working across the Zscaler platform, keeping ZIA and ZPA dialed in, helping teams move away from legacy VPNs, and making sure threats are stopped before they become headlines. Some days you ll be tuning policies and inspecting traffic, other days you ll be troubleshooting access issues, investigating alerts, or partnering with other security teams to improve visibility and response.

This isn t a set it and forget it role. It s hands-on, collaborative, and focused on making cloud security practical, effective, and understandable.

What you ll be doing (in real life)

• Owning and improving Zscaler ZIA and ZPA policies across the enterprise

• Strengthening protections like URL filtering, SSL inspection, sandboxing, malware defense, and IPS

• Investigating security events and access issues without making users miserable

• Feeding Zscaler logs into SIEM tools like Splunk or Sentinel and helping with incident response

• Supporting Zero Trust initiatives such as VPN replacement, app segmentation, and secure remote access

• Creating clear documentation and runbooks that people actually use

Must-haves

• Hands-on experience with Zscaler ZIA and/or ZPA in a real enterprise environment

• Strong understanding of web security, proxy architectures, and Zero Trust / SSE concepts

• Experience working with SSL/TLS inspection, content filtering, and threat prevention policies

• Solid networking fundamentals (DNS, TCP/IP, routing, proxies, certificates)

• Comfortable troubleshooting, documenting, and supporting production environments

Nice-to-haves

• Experience integrating Zscaler with SIEM tools (Splunk, Sentinel, etc.)

• Exposure to DLP, CASB, or data governance concepts

• Scripting or automation skills (PowerShell or Python)

• Zscaler certifications (ZCCA-IA, ZCCA-PA, or similar)

If you like security that s modern, cloud-first, and grounded in how people actually work and you enjoy owning your space without being micromanaged this one s worth a conversation.