Cloud Security Engineer – SASE & Zero Trust

Dice; Northern (KY); Hybrid; USD 150,000 - 190,000; Full time

Job summary

Dice is seeking an experienced Cloud Security Engineer specializing in Zscaler SASE and Zero Trust to design and manage enterprise security, networking, and identity services remotely.

The role demands hands-on expertise across ZIA, ZPA, ZCC, ZDX and integration with Entra ID/Azure AD, Okta, or Ping Identity, plus automation via PowerShell, Python, or Bash.

Qualifications

• 12+ years of IT/Network/Security experience in enterprise environments.
• 3+ years of hands-on Zscaler engineering.
• Experience with ZIA, ZPA, ZCC, ZDX and Zscaler client connectivity.

Responsibilities

• Design, deploy, configure, and manage Zscaler SASE environments.
• Administer ZIA, ZPA, ZCC, ZDX configurations.
• Package and deploy ZCC across endpoints using Intune, Jamf Pro, Tanium or SCCM.
• Configure PAC files, SSL/TLS inspection, and security policies.
• Integrate Zscaler with Entra ID/Azure AD, Okta, or Ping Identity.

Skills

Zscaler engineering

PowerShell

Python

Bash

SASE

Zero Trust

Tools

ZIA

ZPA

ZCC

ZDX

Intune

Jamf Pro

Tanium

SCCM

Wireshark

Azure AD

Okta

Ping Identity

SAML

SCIM

Job description

Hiring: Cloud Security Engineer - SASE & Zero Trust

Job Title: Cloud Security Engineer - SASE & Zero Trust
Experience: 12+ Years
Location: Remote
Duration: Long-Term Contract
Employment Type: W2 AND C2C
Visa : or USC

Job Description

We are looking for an experienced Cloud Security Engineer with strong hands-on expertise in Zscaler, SASE, Zero Trust, endpoint security, networking, and identity management.

Key Responsibilities

• Design, deploy, configure, and manage enterprise Zscaler SASE environments.
• Administer Zscaler Internet Access (ZIA), Zscaler Private Access (ZPA), Zscaler Client Connector (ZCC), and Zscaler Digital Experience (ZDX).
• Package and deploy ZCC across enterprise endpoints using Intune, Jamf Pro, Tanium, SCCM, or similar UEM platforms.
• Configure PAC files, forwarding rules, SSL/TLS inspection, bypass rules, application segments, and security policies.
• Configure ZPA App Connectors and application segments for Zero Trust access.
• Integrate Zscaler with Microsoft Entra ID/Azure AD, Okta, or Ping Identity using SAML/SCIM.
• Provide L3/Tier-3 troubleshooting for ZCC connectivity, certificate errors, posture-check failures, routing issues, and application-access problems.
• Analyze network traffic using Wireshark, TCPDump, and packet captures.
• Manage DNS, TCP/IP, routing, VPN, proxy, and secure web gateway issues.
• Configure and troubleshoot SSL/TLS inspection and PKI certificate chains.
• Monitor and optimize SASE connectivity and tunnel-bypass strategies.
• Develop automation using Python, PowerShell, or Bash.
• Collaborate with Endpoint, Network, IAM, and Security Operations teams.

Required Skills

• 11+ years of overall IT/Network/Security experience
• 3+ years of hands-on Zscaler engineering
• Strong experience with ZIA, ZPA, ZCC, and ZDX
• Experience with Intune, Jamf Pro, Tanium, SCCM, or equivalent UEM platforms
• Strong PowerShell, Python, or Bash scripting
• Strong knowledge of DNS, PAC files, TCP/IP, routing, VPN, proxy technologies, and Wireshark
• Experience with Entra ID/Azure AD, Okta, or Ping Identity
• Strong knowledge of SAML, SCIM, SSO, and MFA
• Strong understanding of PKI, SSL/TLS, root/intermediate certificates, and HTTPS inspection
• Hands-on SASE and Zero Trust architecture experience

Preferred Certifications

• Zscaler Certified Cloud Associate (ZCCA-IA / ZCCA-PA)
• Zscaler Certified Cloud Professional (ZCCP-IA / ZCCP-PA)
• CompTIA Security+
• Microsoft Security certifications
• CCNP Security or equivalent