Position summary
Operate and improve enterprise Zero Trust access services that connect remote and on-site users to private applications and cloud services across hybrid, multi-cloud environments. Administer Zscaler ZPA/ZIA and connectors, integrate enterprise identity providers and MFA, and troubleshoot production access issues involving policies, authentication, device posture, DNS, TLS, and application connectivity.
Must be eligible to obtain a Public Trust Clearance.
Key responsibilities
· Configure and support Zscaler ZPA/ZIA, application segments, access policies, App Connectors, Cloud Connectors, and Client Connector integrations as applicable.
· Integrate SAML/OIDC identity providers, SSO/MFA, identity groups and attributes with access enforcement policies.
· Onboard private applications and users; validate authentication, authorization, DNS, TLS, application ports, and end-to-end connectivity.
· Triage access denials, connector outages, authentication errors, certificate failures, and policy conflicts; document root causes and fixes.
· Maintain runbooks, configuration baselines, logs, change records, and on-call incident support.
Required skills and experience
· 7+ years in network security, ZTNA, identity security, or enterprise security operations.
· Production administration and troubleshooting of Zscaler ZPA/ZIA strongly preferred; comparable ZTNA experience considered when paired with Zscaler expertise.
· Hands-on knowledge of SAML 2.0, OIDC/OAuth 2.0, Microsoft Entra ID or Okta, SSO, MFA, and identity troubleshooting.
· Solid TCP/IP, DNS, HTTP/S, TLS, firewall, routing, and application connectivity troubleshooting skills.
· Experience with SIEM/log analysis, change control, escalation, and production incident restoration.
Preferred qualifications
Preferred: Zscaler product training/certifications; experience with PowerShell/Python, service APIs, and cloud applications.
