Security Engineer - Zscaler

Source Technology Limited; Schweiz; Vor Ort; EUR 97.317 - 140.570; Vollzeit

Zusammenfassung

Source Technology Limited seeks a Security Engineer with hands-on Zscaler expertise to design, implement, and operate Zero Trust and cloud security controls across a secure, resilient manufacturing environment. You will enable secure access for staff, contractors, plants and remote sites while aligning with compliance needs.

Responsibilities include deploying ZIA/ZPA, integrating with SSO/MFA, and maintaining runbooks.

Qualifikationen

• Proven experience as a Security Engineer delivering Zscaler (ZIA/ZPA; ZDX/Cloud Firewall desirable).
• Strong networking fundamentals (DNS, TCP/IP, TLS, proxies, VPN concepts, routing, firewalling).
• Experience with secure web gateway policies, CASB/DLP concepts, and data protection controls.
• Hands-on log analysis, SIEM tooling and incident response processes.
• Knowledge of endpoint security and deployment approaches across Windows/macOS (and mobile desirable).
• Ability to automate and script (e.g., PowerShell, Python) and work with APIs.
• Familiarity with cloud platforms (Azure/AWS) and modern identity and access management.
• Experience working in regulated or high-availability environments; exposure to manufacturing/OT security is beneficial.
• Strong communication skills, able to explain risk and controls clearly to technical and non-technical stakeholders.
• Fluent English required; additional European languages are advantageous.

Aufgaben

• Design, deploy and administer Zscaler Internet Access (ZIA) and Zscaler Private Access (ZPA), including policies, forwarding, PAC files and client connector configuration.
• Implement secure access patterns for applications and users, including segmentation and least-privilege principles.
• Integrate Zscaler with identity providers (SSO, SAML/OIDC), MFA and directory services.
• Monitor and respond to security events using SIEM/SOAR; triage incidents and support investigations.
• Develop and maintain security baselines, standards, documentation and runbooks.
• Collaborate with network, infrastructure and OT/plant teams to balance security, availability and performance.
• Conduct risk assessments, vulnerability management and remediation tracking.
• Support audits and compliance activities (e.g., ISO 27001, NIST-aligned controls), including evidence gathering.

Kenntnisse

Zscaler expertise

SIEM experience

Cloud security

Automation scripting

Ausbildung

Bachelor's degree in CS or Cyber Security

Tools

Zscaler platform

Azure

AWS

SAML/OIDC

Jobbeschreibung

We are seeking a Security Engineer with strong hands-on expertise in Zscaler technologies to support and enhance a secure, resilient manufacturing environment. You will help design, implement, and operate Zero Trust and cloud security controls, ensuring secure access for staff, contractors, plants and remote sites, while aligning with operational needs and compliance requirements.

Key Responsibilities

• Design, deploy and administer Zscaler Internet Access (ZIA) and Zscaler Private Access (ZPA), including policies, forwarding, PAC files and client connector configuration.
• Implement secure access patterns for applications and users, including segmentation and least-privilege principles.
• Integrate Zscaler with identity providers (SSO, SAML/OIDC), MFA and directory services.
• Monitor and respond to security events using SIEM/SOAR; triage incidents and support investigations.
• Develop and maintain security baselines, standards, documentation and runbooks.
• Collaborate with network, infrastructure and OT/plant teams to balance security, availability and performance.
• Conduct risk assessments, vulnerability management and remediation tracking.
• Support audits and compliance activities (e.g., ISO 27001, NIST-aligned controls), including evidence gathering.

Essential Requirements

• Proven experience as a Security Engineer with practical delivery of Zscaler (ZIA/ZPA; ZDX/Cloud Firewall desirable).
• Strong understanding of networking fundamentals (DNS, TCP/IP, TLS, proxies, VPN concepts, routing, firewalling).
• Experience with secure web gateway policies, CASB/DLP concepts, and data protection controls.
• Hands-on experience with log analysis, SIEM tooling and incident response processes.
• Knowledge of endpoint security and deployment approaches across Windows/macOS (and mobile desirable).
• Ability to automate and script (e.g., PowerShell, Python) and work with APIs.
• Familiarity with cloud platforms (Azure/AWS) and modern identity and access management.
• Experience working in regulated or high-availability environments; exposure to manufacturing/OT security is beneficial.
• Strong communication skills, able to explain risk and controls clearly to technical and non-technical stakeholders.
• Fluent English required; additional European languages are advantageous.

Qualifications

• Relevant security certifications preferred (e.g., Zscaler certifications, CISSP, CISM, CCSP, Security+).
• Degree in Computer Science, Cyber Security, Engineering, or equivalent experience.

Location & Salary

• Location: Switzerland
• Salary: Competitive (DOE)