Zscaler Engineer

Zscaler Engineer
Location: Full remote
Duration: 3 initial months
MUST BE PAYE THROUGH UMBRELLA

Role Description:

The Zscaler Engineer is responsible for understanding, operating, and supporting the organisation's existing Zscaler deployment (ZIA/ZPA). The role focuses on reviewing the current implementation, maintaining day-to-day operations, and ensuring secure, reliable access for users and applications. The engineer will work closely with the Network and IDAM teams to maintain aligned and secure services.

Key Responsibilities

• Review and document the existing Zscaler architecture, traffic flows, authentication methods, and integrations.
• Maintain day-to-day operations including monitoring logs, managing policies, and supporting user/device onboarding.
• Troubleshoot ZIA/ZPA issues such as connectivity, authentication failures, Zscaler Client Connector behaviour, and policy-related blocks.
• Collaborate closely with the Network team on traffic routing, GRE/IPsec tunnels, DNS, SD-WAN, and connectivity optimisation.
• Partner with the IDAM team on SSO/SAML integrations, SCIM provisioning, identity policies, and certificate/SSL requirements.
• Produce operational and compliance reports covering user activity, threats, tunnel health, and usage patterns.
• Support integrations with SIEM, security tools, and identity platforms.
• Assist with audits, security reviews, and adherence to enterprise security standards.
• Recommend improvements, maintain configuration hygiene, and track new Zscaler features.

Required Skills & Experience

• Hands-on experience administering Zscaler ZIA and/or ZPA.
• Strong knowledge of Zero Trust, DNS/HTTPS, SSL inspection, GRE/IPsec tunnels, and SSO integrations (Azure AD/Okta).
• Experience troubleshooting network, identity, and policy-driven issues.
• Ability to work effectively with Network and IDAM teams to resolve cross-domain issues.
• Good documentation and communication skills.

Preferred Qualifications

• Zscaler certifications (ZCCA-IA, ZCCA-PA, ZCP).
• Experience with SD-WAN, identity platforms, automation (PowerShell/Python), and ITIL processes.
• Background in network or cloud security.

Soft Skills

• Strong analytical and problem-solving capabilities.
• Clear communication with both technical and non-technical stakeholders.
• Self-motivated, detail-oriented, and able to work independently across UK/India teams.