Zero Trust Security Engineer

Varmoda is seeking an experienced Zero Trust Network Access (ZTNA) / Zscaler Security Engineer to operate, support, and continuously improve enterprise Zero Trust access services across hybrid and multi-cloud environments. This role will administer Zscaler ZPA/ZIA services, integrate enterprise identity and MFA solutions, onboard private applications, and troubleshoot complex production access issues involving authentication, security policies, device posture, DNS, TLS, and application connectivity. The ideal candidate brings 7+ years of network security, ZTNA, identity security, or enterprise security operations experience with strong hands-on troubleshooting capabilities.

Key Responsibilities

• Configure, administer, and support Zscaler ZPA and ZIA, including application segments, access policies, App Connectors, Cloud Connectors, and Client Connector integrations, as applicable.
• Integrate SAML/OIDC identity providers, SSO, and MFA solutions with Zero Trust access services and enforcement policies.
• Configure and manage identity groups and attributes used for authentication, authorization, and access-policy enforcement.
• Onboard private applications and users while validating authentication, authorization, DNS resolution, TLS connectivity, application ports, and end-to-end application access.
• Troubleshoot access denials, App Connector outages, authentication errors, certificate failures, policy conflicts, and application connectivity issues.
• Perform root-cause analysis of production access incidents and document identified causes, resolutions, and remediation actions.
• Analyze logs and security events to support incident investigation, escalation, and service restoration.
• Maintain operational runbooks, configuration baselines, logs, change records, and other supporting documentation.
• Participate in change-control activities, production incident response, escalation processes, and on-call support as required.

Required Qualifications

• 7+ years of experience in network security, Zero Trust Network Access (ZTNA), identity security, or enterprise security operations.
• Strong production administration and troubleshooting experience with Zscaler ZPA/ZIA preferred; comparable ZTNA experience may be considered when combined with Zscaler expertise.
• Hands-on knowledge of SAML 2.0, OIDC/OAuth 2.0, SSO, and MFA.
• Experience working with enterprise identity platforms such as Microsoft Entra ID or Okta, including identity and authentication troubleshooting.
• Strong understanding of TCP/IP, DNS, HTTP/S, TLS, firewalls, routing, and application connectivity.
• Experience troubleshooting complex network, identity, authentication, certificate, and application-access issues in production environments.
• Experience with SIEM/log analysis, change control, incident escalation, and production service restoration.

Preferred Qualifications

• Zscaler product training and/or certifications.
• Experience using PowerShell or Python for administration, automation, or operational support.
• Experience working with service APIs and integrations.
• Experience supporting access to cloud applications and services.
• Experience operating security services across hybrid and multi-cloud environments.
• Certifications & Clearance
• Preferred: Relevant Zscaler product training and/or Zscaler certifications.

Recommended Experience: 7+ years