Zero Trust Cloud Security Engineer (Zscaler SME)

Metric Systems LLC; Clarksburg (WV); On-site; USD 120,000 - 180,000; Full time

Job summary

Metric Systems LLC seeks a Network Security Engineer SME to lead Zero Trust modernization for the FBI CJIS division, implementing Zscaler ZIA/ZPA, and migrating from legacy proxies and VPNs to cloud‑delivered security.

In a mature SAFe Agile environment, you will work with federal and contractor engineers to shape future‑state security capabilities, enforce identity‑based access, and gain marketable expertise in cloud security and ZTNA platforms. Top Secret clearance is required.

Qualifications

• Hands-on experience with Zscaler ZIA/ZPA or comparable cloud security platforms.
• 10+ years of network security or cybersecurity engineering experience.
• Experience supporting Zero Trust architectures and enterprise security migrations.
• Experience integrating with identity providers (AD/Azure AD) and SAML/OIDC.
• Strong networking knowledge including firewalls, routing, DNS, and proxy architectures.

Responsibilities

• Participate in SAFe Agile ceremonies and deliver work within sprint cycles.
• Lead the implementation of Zscaler ZIA and ZPA to support Zero Trust.
• Develop and execute migration strategies to cloud‑based security architectures.
• Design direct-to-cloud connectivity solutions and eliminate on‑prem traffic backhaul.
• Configure Zscaler policies and integrate with identity providers.
• Collaborate with cross‑functional teams to support TIC 3.0‑aligned architectures.
• Manage and resolve complex network security issues and support O&M activities.
• Develop and maintain architecture diagrams, implementation plans, and SOPs.

Skills

Zscaler experience

10+ years experience

Technical lead / SME

Zero Trust architecture

Education

Bachelor's degree preferred

Tools

Palo Alto

Cisco

Splunk

SAFe Agile (Jira/Confluence)

Job description

Metric Systems LLC seeks a Network Security Engineer SME to lead Zero Trust modernization for the FBI CJIS division, implementing Zscaler ZIA/ZPA, and migrating from legacy proxies and VPNs to cloud‑delivered security.

In a mature SAFe Agile environment, you will work with federal and contractor engineers to shape future‑state security capabilities, enforce identity‑based access, and gain marketable expertise in cloud security and ZTNA platforms. Top Secret clearance is required.