Senior Zscaler Security Engineer

Artsloungenyc; Calgary; On-site; CAD 110,000 - 170,000; Full time

Benefits offered by this job

Competitive salaries

Part-time study program

Annual fitness subsidy

Job summary

Canadian Pacific Kansas City / CPKC is seeking a Senior Zscaler Security Engineer to advance its Zero Trust security strategy in Calgary. You will architect and automate ZIA, ZPA, ZDX and related security services to enable secure access across the enterprise.

Collaborate with Infrastructure, Cloud, IAM, DevOps, and SOC teams to deliver scalable, resilient security solutions while mentoring engineers and shaping CI/CD pipelines and governance for rapid, secure business enablement.

Qualifications

• Bachelor's degree or equivalent practical experience in cybersecurity or related field.
• Experience with APIs, automation in Python/PowerShell, and IaC tooling.
• Strong knowledge of Zero Trust, SASE/SSE, cloud security, IAM, and networking.

Responsibilities

• Lead architecture, deployment, and optimization of Zscaler solutions (ZIA, ZPA, ZDX, CASB, DLP, Cloud Firewall).
• Design Zero Trust and SASE strategies across the enterprise.
• Automate Zscaler configurations using APIs, Python, and PowerShell.
• Build Infrastructure as Code (Terraform) with robust version control.
• Create self-service tools to reduce manual effort and improve efficiency.
• Maintain CI/CD pipelines for testing, deployment, and rollback of security configurations.
• Troubleshoot security, network, and automation issues across cloud, proxy, authentication, and access environments.
• Drive security posture improvements through assessments, policy optimization, and compliance reporting.
• Collaborate with Infrastructure, Cloud, IAM, DevOps, and SOC teams to deliver secure, scalable solutions.
• Mentor engineers on automation and security best practices.

Skills

APIs

Python

PowerShell

Terraform

Git

CI/CD

Zero Trust

SASE

Cloud security

IAM

Networking

SSL/TLS

Access technologies

Education

Bachelor's degree in Cybersecurity

Bachelor's degree in Information Technology

Bachelor's degree in Computer Science

Bachelor's degree in Software Engineering

Tools

Terraform

Git

Job description

Canadian Pacific Kansas City / CPKC is hiring a full-time experienced Security Engineer to join their team. Candidates who identify as one of the following can apply: women, Black, Indigenous, People of Color (BIPOC), members of the LGBTQ+ community and people with disabilities.

“We are seeking a Senior Zscaler Security Engineer to spearhead the evolution of CPKC’s Zero Trust security strategy. As the subject matter expert for ZIA, ZPA, and ZDX, you will architect and automate next-generation secure access solutions, drive cloud and network security innovation, and help shape the future of enterprise cybersecurity. Partnering across Infrastructure, Cloud, IAM, Security, and DevOps teams, you will deliver scalable, resilient, and seamless security experiences that enable the business to move faster and more securely.”

Application is still ongoing until said otherwise. Ideal candidate must possess a bachelor’s degree in Cybersecurity, Information Technology, Computer Science, Software Engineering, or equivalent practical experience in either of the field. Experience on APIs, Python/PowerShell automation, Terraform, Git, and CI/CD, with the ability to translate business and security requirements into scalable, automated solutions is a great plus.

Candidates must also have expertise in Zero Trust, SASE/SSE, cloud security, IAM, networking, SSL/TLS, and enterprise access technologies.

CPKC offers good tidings competitive salaries, part-time study program, annual fitness subsidy. Successful applicant will perform the following functions

• Lead the architecture, deployment, and optimization of Zscaler solutions, including ZIA, ZPA, ZDX, CASB, DLP, and Cloud Firewall
• Design and implement Zero Trust and SASE strategies that enable secure, seamless access across the enterprise
• Develop and automate Zscaler configurations, policies, and operational workflows using APIs, Python, and PowerShell
• Build and manage Infrastructure as Code (Terraform) solutions with robust version control and governance practices
• Create self-service tools and automation that reduce manual effort, increase consistency, and improve operational efficiency
• Establish and maintain CI/CD pipelines to automate testing, validation, deployment, and rollback of security configurations
• Troubleshoot complex security, network, and automation issues across cloud, proxy, authentication, and access environments
• Drive security posture improvements through assessments, policy optimization, compliance reporting, and operational metrics
• Partner with Infrastructure, Cloud, IAM, DevOps, and SOC teams to deliver secure, scalable, and resilient access solutions
• Mentor engineers on automation, scripting, infrastructure as code, and security best practices to build enterprise-wide capability