Zscaler Security Engineer – Contract, On‑Site

OpticoreIT; Greater London; On-site; GBP 111,000 - 138,000; Full time

Benefits offered by this job

On-site work in London (2 days/week)

Job summary

Opticore IT specialises in Network Engineering and Project Management and is seeking a Security Engineer with strong Zscaler expertise for a 6-month IR35 contract in London. The role requires two on-site days per week to support a large-scale divestiture program.

You will implement a new Zscaler tenant (ZIA/ZPA), configure policies, establish inter-tenant federation, and ensure secure cross-tenant operations with audits and monitoring. Prior experience with GRE tunnels and ZDX is prized.

Qualifications

• Experience with Zscaler ZIA and ZPA administration.
• Identity federation skills (SMAL/OIDC, Okta, SCIM).
• Experience with multi-tenant/separation delivery in cloud security.

Responsibilities

• Build and configure Zscaler tenant (ZIA and ZPA) as a full net-new deployment for the retained entity.
• Configure ZIA internet security policies (URL filtering, threat protection, DLP, SSL inspection, cloud firewall).
• Configure ZPA access, forwarding, inspection, and isolation policies; deploy ZPA App Connectors.
• Establish GRE tunnels from PoP internet routers to the ZIA cloud instance; configure ZDX monitoring.
• Configure SAML/OIDC federation and attribute-based user routing between tenants and IdP (e.g. Okta).
• Implement bidirectional separacy controls and automated policy audit mechanisms.

Skills

Zscaler ZIA

Zscaler ZPA

Identity Federation

Okta SCIM

Multi-tenant separation

Zero Trust

GRE/IPSec

Client Connector

Job description

Opticore IT specialises in Network Engineering and Project Management and is seeking a Security Engineer with strong Zscaler expertise for a 6-month IR35 contract in London. The role requires two on-site days per week to support a large-scale divestiture program.

You will implement a new Zscaler tenant (ZIA/ZPA), configure policies, establish inter-tenant federation, and ensure secure cross-tenant operations with audits and monitoring. Prior experience with GRE tunnels and ZDX is prized.