Zscaler SME/Lead

About This Role

This role involves supporting, maintaining, optimizing, and improving a Zscaler implementation for a Government Agency, focusing on secure and seamless network connectivity. The engineer will leverage expertise in ZIA, ZPA, and ZDX to troubleshoot complex networking and security issues.

Responsibilities

• Provide operational support, maintenance, and engineering for the full Zscaler product suite (ZIA, ZPA, ZDX)
• Configure and tune the system to optimize performance and alerting
• Troubleshoot complex networking and security issues related to Zscaler
• Provide guidance on Zscaler network and security capabilities
• Ensure compliance with security standards, policies, and best practices
• Collaborate with cross-functional teams to integrate Zscaler with existing infrastructure
• Develop and maintain technical documentation, including network diagrams and security policies
• Design, implement, and optimize Zscaler solutions aligned with SASE/Zero Trust strategies
• Configure and fine-tune URL filtering, threat protection, DLP, and SSL inspection policies
• Manage PAC / tunnel / GRE/IPsec onboarding and troubleshooting
• Manage change control and exceptions
• Support SSL Inspection, DLP, Firewall, and DNS
• Onboard internal applications (defining app segments, segment groups, server groups)
• Manage connector placement, routing, and HA design

Requirements

• 8+ years of experience in network security, cloud security, or related fields
• 2+ years of hands-on experience with Zscaler deployments in a professional support role
• Experience deploying and operating ZScaler ZIA, ZPA, and ZDX for large enterprises
• Deep understanding of Zscaler Internet Access (ZIA) and Zscaler Private Access (ZPA), and Zscaler Client Connector
• Experience with deployments and management of App Connectors and Branch Connectors
• Familiarity with Zscaler’s cloud architecture and security services
• Strong knowledge of networking protocols (TCP/IP, HTTP/HTTPS, DNS, etc.)
• Solid network and cybersecurity fundamentals knowledge
• Knowledge of cybersecurity principles and best practices
• Familiarity with cloud service providers (AWS, Azure, Google Cloud)
• Understanding of Trusted Internet Connections (TIC)
• Fundamental knowledge of MPLS and WAN routing principles
• Fundamental knowledge of IPv4 and IPv6 protocols
• Understanding of Zero Trust principles and Secure Web Gateway (SWG) architectures
• Ability to obtain and maintain a public trust clearance

Qualifications

• Bachelor's Degree or equivalent additional experience
• 8+ years of experience in network security, cloud security, or related fields, with 2+ years hands-on with Zscaler deployments in a professional support role.

Nice to Have

• Zscaler Digital Transformation Administrator (ZDTA) certification
• Zscaler Digital Transformation Engineer (ZDTE) certification
• Zscaler Digital Experience Administrator (ZDXA) certification
• Proficiency with automation and scripting tools (Python, Ansible, Terraform)
• Network and Security Certifications

Skills

* Required skills

Benefits