Security Engineer – Zscaler Cloud, CASB & DLP Specialist

Tech X; Arlington (VA); On-site; USD 150,000 - 190,000; Full time

Job summary

Tech(x) is seeking a Security Engineer to join our CISA engagement and implement ZScaler solutions for secure cloud access. You will design, test, and deploy enterprise-grade security controls, DLP, and CASB policies while coordinating with the IT and development teams.

Based in Arlington, VA, you will drive security engineering across hybrid environments, migrate from legacy networks to cloud-centric architectures, and ensure governance and compliant, auditable operations.

Qualifications

• Hands-on experience in network design and engineering for large enterprise environments.
• Experience implementing ZScaler CASB in an enterprise setting.
• Familiar with DLP practices, cloud access controls, and SaaS security.
• Proficiency with cloud and on-prem networking migrations and related tooling.

Responsibilities

• Engineer, design, test, and implement ZScaler internet and private access solutions.
• Develop and maintain documents and test plans for network changes.
• Operate and monitor 24/7 NOC processes and incident handling.
• Provide guidance on CASB, DLP, API, and SD-WAN implementations.
• Collaborate with developers, operations, and stakeholders to ensure secure architectures.
• Assist in training teams and documenting best practices for security engineering.

Skills

Network Design

Network Engineering

Cloud Engineering

Zscaler CASB

DLP

Cloud IAM

VMware vCenter

Jira

ServiceNow

Cloud Reporting

Cloud Monitoring

Education

Bachelor's degree or 9 years' experience in lieu of a degree

Job description

Tech(x) is seeking a Security Engineer to join our CISA engagement and implement ZScaler solutions for secure cloud access. You will design, test, and deploy enterprise-grade security controls, DLP, and CASB policies while coordinating with the IT and development teams.

Based in Arlington, VA, you will drive security engineering across hybrid environments, migrate from legacy networks to cloud-centric architectures, and ensure governance and compliant, auditable operations.