Senior ZIA Engineer ( Zscaler )

Orion Innovation; New York (NY); Presencial; USD 140 000 - 190 000; Tempo integral

Resumo da oferta

Orion Innovation is recruiting for a Senior Zscaler Engineer to provide daily operational support for the Zscaler platform, manage security policies, and drive large-scale rollout projects. The role emphasizes advanced ZIA/ZPA configurations, traffic forwarders, and identity integrations with SAML 2.0/SCIM across enterprise environments.

Candidates should have extensive experience with SSL/TLS inspection, PKI management, and diagnosing network issues using packet analysis.

Qualificações

• Deep ZIA expertise at large scale (hundreds of thousands of users).
• ZPA and Zero Trust Network Access design including app segmentation and policy.
• Traffic forwarding experience (GRE, IPsec, PAC files) across OSes.
• Strong routing/architecture knowledge (BGP, OSPF, SD-WAN).
• Identity integration via SAML 2.0 and SCIM.
• SSL/TLS inspection and enterprise PKI management.
• Advanced diagnostics with packet analysers.
• Senior-level experience supporting a large global enterprise.

Responsabilidades

• Provide daily operational support and troubleshooting for the Zscaler platform.
• Support project expansions and rollouts.
• Manage ZIA policy: Threat protection, Cloud Firewall, Sandboxing, DLP, and URL filtering.
• Manage ZPA zero trust access: segmentation, App Connectors, and access policies.
• Deploy and troubleshoot traffic forwarding at scale with GRE/IPsec/PACs and Zscaler Client Connector.
• Integrate Zscaler with identity providers using SAML 2.0 and SCIM (e.g., Microsoft Entra ID, Okta).
• Manage enterprise PKI and design SSL/TLS inspection policies.
• Isolate latency and packet loss using packet analysis and ZDX.
• Build reporting/telemetry for SecOps; automate with Python/PowerShell/Terraform against Zscaler APIs.
• Collaborate with other technology teams.

Conhecimentos

ZIA expertise

ZPA / Zero Trust

Traffic forwarding

Routing architecture

SAML 2.0 / SCIM

SSL/TLS inspection

Diagnostics / packet analysis

Senior enterprise support

Ferramentas

Python

PowerShell

Terraform

Descrição da oferta de emprego

Orion Innovation is a premier, award-winning, global business and technology services firm. Orion delivers game-changing business transformation and product development rooted in digital strategy, experience design, and engineering, with a unique combination of agility, scale, and maturity. We work with a wide range of clients across many industries including financial services, professional services, telecommunications and media, consumer products, automotive, industrial automation, professional sports and entertainment, life sciences, ecommerce, and education.

Project Overview

The work covers daily support and troubleshooting, support for expansion projects, and reporting and telemetry projects for Security Operations and adjacent teams. The environment serves a very large user base, so the role calls for advanced platform expertise, architectural knowledge, and enterprise routing skills. The engineer works across multiple teams. Experience with Zscaler’s DLP and AI capabilities is a plus.

Key Responsibilities

• Provide daily operational support and troubleshooting for the Zscaler platform.
• Support project expansions and rollouts.
• Manage ZIA policy: advanced threat protection, Cloud Firewall, Sandboxing, DLP, and URL filtering.
• Manage ZPA zero trust network access: application segmentation, App Connectors, and access policies that replace legacy VPNs.
• Deploy and troubleshoot traffic forwarding at scale using GRE tunnels, IPsec tunnels, PAC files, and Zscaler Client Connector.
• Integrate Zscaler with enterprise identity providers using SAML 2.0 and SCIM, such as Microsoft Entra ID and Okta.
• Manage enterprise PKI and root certificates, and design SSL/TLS inspection policies that don’t break sensitive or business-critical applications.
• Isolate latency, packet loss, and application breaks using packet analysis and Zscaler Digital Experience (ZDX).
• Build reporting and telemetry projects for SecOps and other teams, and automate with Python, PowerShell, or Terraform against the Zscaler APIs.
• Work with other technology teams.

Required Skills and Experience

• Deep ZIA expertise at large scale (hundreds of thousands of users).
• ZPA and Zero Trust Network Access, including application segmentation, App Connectors, and access policy design.
• Traffic forwarding experience with GRE, IPsec, PAC files, and Zscaler Client Connector across diverse operating systems.
• Strong routing and architecture knowledge: BGP, OSPF, and SD-WAN integration.
• Identity integration through SAML 2.0 and SCIM.
• SSL/TLS inspection and enterprise PKI management.
• Advanced diagnostics with packet analyzers.
• Senior-level experience supporting a large global enterprise.

Nice to have

• Zscaler DLP and AI capabilities.
• Zscaler Digital Experience (ZDX) for proactive monitoring of end-user, network, and application performance.
• Automation and API experience with Python, PowerShell, or Terraform, including configuration backups, bulk policy updates, and log streaming (NSS).
• Reporting and telemetry experience supporting SecOps teams.
• Prior financial-services experience.

Orion is an equal opportunity employer, and all qualified applicants will receive consideration for employment without regard to race, color, creed, religion, sex, sexual orientation, gender identity or expression, pregnancy, age, national origin, citizenship status, disability status, genetic information, protected veteran status, or any other characteristic protected by law.

Candidate Privacy Policy

Orion Systems Integrators, LLC And Its Subsidiaries And Its Affiliates (collectively, “Orion,” “we” Or “us”) Are Committed To Protecting Your Privacy. This Candidate Privacy Policy (orioninc.com) (“Notice”) Explains

• What information we collect during our application and recruitment process and why we collect it;
• How we handle that information; and
• How to access and update that information.

Your use of Orion services is governed by any applicable terms in this notice and our general Privacy Policy.