ZScaler Engineer – part-time

This is a fully remote position, open to applicants in United States.

📋 Description

• Design and create enterprise Zscaler Private Access (ZPA) architectures, encompassing App Connector placement, redundancy, capacity planning, application segments, access policies, and naming conventions.

• Configure and secure the ZPA tenant utilizing least-privilege administrative roles, suitable administrator authentication protocols, and secure platform configuration standards.

• Develop and implement Zscaler Client Connector settings that work alongside third-party agency VPN clients.

• Design and maintain Client Connector and ZPA Browser Access solutions.

• Engineer DNS and application access setups, including internal FQDN design, connector-side DNS resolution, application segmentation, and controls to prevent external agencies from directly accessing internal DNS infrastructure.

• Validate end-to-end brokered application connectivity through Zscaler and the enterprise data center to secure applications.

• Integrate ZPA with enterprise identity services, including SAML federation with Okta and identity/group mappings.

• Configure Zscaler Log Streaming Service (LSS) and integrate ZPA activity and security logging with Rapid7 InsightIDR or similar SIEM platforms.

• Develop repeatable migration processes for onboarding organizations and applications, covering publishing, identity/group mapping, VPN or tunnel cutover, validation, rollback, and decommissioning.

• Produce comprehensive as-built documentation detailing the production ZPA tenant, App Connectors, application segments, policies, security hardening, and supporting configurations.

• Create operational runbooks and troubleshooting procedures.

• Provide technical guidance, knowledge transfer, train-the-trainer sessions, and post-deployment hypercare support to internal engineering and security teams.

⛳️ Requirements

• Proven hands-on experience in designing, deploying, configuring, and supporting Zscaler Private Access (ZPA) in enterprise settings.

• Solid understanding of Zero Trust Network Access (ZTNA) principles and the transition from traditional VPN or network-level access to application-centric, identity-aware access controls.

• Experience in deploying and troubleshooting Zscaler Client Connector, especially in environments where it must coexist with other endpoint VPN technologies.

• Experience in architecting and managing ZPA App Connectors, App Connector Groups, application segments, segment groups, access policies, and Browser Access.

• Strong knowledge of enterprise networking concepts, including DNS, routing, firewall rules, TCP/IP, application connectivity, proxy technologies, VPNs, and data center connectivity.

• Experience with enterprise identity federation and access management technologies, preferably Okta, SAML, MFA, identity groups, and identity-based access policies.

• Experience integrating Zscaler logging and telemetry with SIEM or security analytics platforms; familiarity with Zscaler LSS and Rapid7 InsightIDR is highly desirable.

• Ability to perform end-to-end troubleshooting across endpoints, Zscaler services, App Connectors, enterprise networks, identity systems, and protected applications.

• Experience in designing highly available and scalable ZPA environments, including connector sizing, redundancy, bandwidth planning, and capacity planning for large user populations.

• Experience in developing migration plans and executing phased or wave-based migrations involving multiple independent organizations or business units.

• Excellent documentation skills with experience creating solution designs, as-built documentation, administrator runbooks, deployment guides, troubleshooting procedures, and end-user documentation.

• Ability to communicate technical concepts effectively to audiences with varying levels of expertise.

• Experience in conducting technical knowledge-transfer sessions and transitioning newly implemented platforms to operational support teams.

• Ability to coordinate activities across parallel identity, networking, security, application, and third-party vendor workstreams.

• Preferred: Zscaler certifications such as Zscaler Certified Engineer/Administrator in ZPA or Zero Trust Access.

• Relevant networking or cybersecurity certifications and prior experience in government, public safety, criminal justice, or other highly regulated environments would be advantageous.

🏝️ Benefits

• Competitive salary, paid bi-monthly.

• Exceptional medical coverage.

• 100% of medical premiums covered by True Zero.

• Company-wide new business incentive programs.

• Contribution Incentives (e.g., white papers, blog posts, internal webinars, etc.).

• 3 weeks of PTO plus 11 Paid Holidays Annually.

• 401k Program with a 100% company match on the first 4%.

• Monthly reimbursement for Cell Phone and Home Internet expenses.

• Paternity/Maternity Leave.

• Investment in training and certifications to enhance and expand your technical skills.