FLETC- Sr Zscaler Security Engineer

Easy Dynamics Corporation; United States; Remote; USD 125,000 - 140,000; Full time

Job summary

Easy Dynamics Corporation is seeking a Senior Zscaler Security Engineer to lead and support a Zero Trust security program across ZIA, ZPA, ZDX, and related services. This hands-on role requires optimizing policies, implementing controlled changes, and integrating Zscaler with enterprise security, monitoring, and identity platforms.

The ideal candidate has 10+ years in cybersecurity/Zero Trust, 3+ years with Zscaler (ZIA/ZPA), and strong scripting/API skills.

Qualifications

• 10+ years of cybersecurity, network-security, or Zero Trust engineering experience in federal/public-sector environments.
• 3+ years hands-on experience administering, configuring, and troubleshooting Zscaler capabilities (ZIA/ZPA).
• Experience with REST APIs and scripting languages such as Python or PowerShell.
• Excellent communication skills to diverse stakeholders and ability to adapt messaging for leadership, technical staff, and teams.
• BA/BS degree or equivalent experience.
• Must be a US Citizen and able to obtain a US Government security clearance/public trust.

Responsibilities

• Lead and support Zero Trust security controls, focusing on Zscaler integration with enterprise network, identity, device, app, data, and visibility.

Skills

Communication

Consultative mindset

Education

BA/BS degree or equivalent

Tools

Zscaler

GitLab

Jira

Confluence

Python

PowerShell

Job description

About the role

Easy Dynamics is seeking an experienced Senior Zscaler Security Engineer to support a high-impact Digital Transformation and Zero Trust implementation program. This is a hands‑on engineering role responsible for operating, securing, troubleshooting, and expanding an enterprise Zscaler environment across ZIA, ZPA, ZDX, Zidentity, Client Connector, and capabilities such as OneAPI, Data Loss Prevention, Deception, and Branch Connector

The successful candidate will assess and optimize existing Zscaler policies, plan and implement controlled configuration changes, troubleshoot user and traffic‑forwarding issues, and integrate Zscaler with enterprise security, monitoring, identity, and service‑management platforms. The engineer will work closely with federal stakeholders, network and security teams, the service desk, DHS headquarters, and technology vendors to align the environment with approved baselines, Zero Trust principles, and federal security requirements.

This position requires strong technical execution as well as the ability to translate complex security topics into clear recommendations, implementation plans, change requests, operating procedures, and leadership briefings.

What you’ll do

• Zero Trust Architecture and Implementation:

  • Lead and support the implementation of Zero Trust security controls, with primary responsibility for Zscaler and its integration with enterprise network, identity, device, application, data, and visibility capabilities.
• • Support network segmentation and Zero Trust access strategies by configuring and integrating ZPA, ZIA, Client Connector, Cloud Firewall, Branch Connector, and related network‑security controls.
• • Conduct thorough risk assessments, identify vulnerabilities, and develop proactive strategies to mitigate risks in line with Zero Trust principles across network and data domains.
• • Review proposed architectures, integrations, designs, and change requests for alignment with federal requirements, Zero Trust principles and the approved enterprise security architecture.

• Zscaler Architecture & Configuration:

  • Administer and optimize ZIA, ZPA, ZDX, Zidentity, Client Connector, Sandbox, SSL Inspection, Cloud Firewall, URL Filtering, and related Zscaler services.
• • Review existing Zscaler configurations against vendor‑recommended and DHS/HQ baselines; document deviations, risks, and remediation recommendations.
• • Design and implement Zscaler policies for web access, application access, traffic forwarding, SSL/TLS inspection, sandboxing, threat protection, file handling, and user/device‑based controls.
• • Analyze rule order, policy dependencies, bypasses, exclusions, and catch‑all behavior to safely integrate new requirements into existing production configurations.
• • Develop and execute phased implementation, testing, rollback, and validation plans for Zscaler changes that may affect user access or production traffic.
• • Troubleshoot Zscaler service issues involving Client Connector, authentication, traffic forwarding, application access, policy enforcement, certificates, SSL inspection, and integrations.
• • Align Zscaler deployments with the CISA Zero Trust Maturity Model and organizational Zero Trust strategies.

• Integration with Enterprise Tools:

  • Integrate Zscaler with endpoint security, vulnerability management, infrastructure monitoring, identity, SIEM/SOAR, and ITSM platforms, including CrowdStrike, Tripwire, Qualys, ScienceLogic, Splunk, ServiceNow/HEAT, Active Directory, and Microsoft Entra ID, as applicable.
• • Implement Zscaler integration with cloud storage and collaboration platforms to enforce secure data access and sharing.

• Security Strategy & Consulting:

  • Document and address organization’s information security, cybersecurity architecture, and systems security engineering requirements throughout the acquisition life cycle
• • Participate in security reviews, identify gaps in security architecture, and develop a security risk management plan
• • Advise stakeholders on best practices for security modernization, cloud migration, and risk reduction.
• • Conduct gap analysis and develop actionable roadmaps for security capability uplift.
• • Provide architectural guidance and mentor technical teams on Zscaler and integrated security solutions.

Qualifications

• 10+ years of cybersecurity, network‑security, or Zero Trust engineering experience, including experience in federal, public‑sector, or similarly regulated environments.

• 3+ years of substantial hands‑on experience administering, configuring, and troubleshooting Zscaler capabilities, particularly ZIA and ZPA.

• Demonstrated experience with Zscaler policy design, rule ordering, SSL/TLS Inspection, sandboxing, traffic forwarding, URL filtering, application access, certificates, and Client Connector.

• Experience implementing production changes through documented testing, approvals, rollback planning, validation, and change control.

• Experience with REST APIs and scripting languages such as Python or PowerShell.

• Excellent communication skills to internal and external stakeholders – ability to adjust messaging to a variety of audiences (client leadership, technical staff, team members etc.).

• Consultative mindset and ability to map solutions against client challenges.

• BA/BS degree or equivalent experience.

• Must be a US Citizen and able to obtain a US Government security clearance/public trust.

Preferred Qualifications

• Industry certifications: Zscaler Certified Cloud Professional (ZCCP), Zscaler Certified Cloud Administrator (ZCCA), CISSP, CISM, CCSP, Azure Security Specialty.

• Experience in federal government or regulated industry environments.

• Knowledge of secure cloud adoption frameworks and hybrid environment security.

• Experience with GitLab or comparable source‑control and CI/CD tooling.

• Familiarity with Jira and Confluence for work tracking, technical documentation, and lifecycle management.

• Experience creating operational dashboards, alerting workflows, runbooks, and security‑response procedures.

The annual salary range for this position is $125,000- 140,000

Easy Dynamics is an equal opportunity employer. Applicants are considered for positions without discrimination on the basis of race, color, religion, sex, national origin, age, disability, sexual orientation, gender identity, veteran status or any other consideration made unlawful by applicable federal state or local laws.