Zero Trust Security Engineer

CORETEC; Washington (District of Columbia); On-site; USD 120,000 - 180,000; Full time

Job summary

CORETEC is seeking a skilled security engineer to operate and improve enterprise Zero Trust access services connecting remote and on-site users to private applications and cloud services across hybrid, multi-cloud environments.

The role administers Zscaler ZPA/ZIA, integrates enterprise identity providers and MFA, and troubleshoots production access issues involving policies, authentication, device posture, DNS, TLS, and application connectivity.

Qualifications

• 7+ years in network security or enterprise security operations.
• Production administration and troubleshooting of Zscaler ZPA/ZIA strongly preferred; comparable ZTNA experience considered when paired with Zscaler expertise.
• Hands-on knowledge of SAML 2.0, OIDC/OAuth 2.0, Microsoft Entra ID or Okta, SSO, MFA, and identity troubleshooting.
• Solid TCP/IP, DNS, HTTP/S, TLS, firewall, routing, and application connectivity troubleshooting skills.
• Experience with SIEM/log analysis, change control, escalation, and production incident restoration.

Responsibilities

• Configure and support Zscaler ZPA/ZIA, application segments, access policies, App Connectors, Cloud Connectors, and Client Connector integrations as applicable.
• Integrate SAML/OIDC identity providers, SSO/MFA, identity groups and attributes with access enforcement policies.
• Onboard private applications and users; validate authentication, authorization, DNS, TLS, application ports, and end-to-end connectivity.
• Triage access denials, connector outages, authentication errors, certificate failures, and policy conflicts; document root causes and fixes.
• Maintain runbooks, configuration baselines, logs, change records, and on‑call incident support.

Skills

ZTNA security

SAML/OIDC/SAML

SSO/MFA

Troubleshooting

TCP/IP/DNS/TLS

Tools

Zscaler ZPA/ZIA

SIEM

PowerShell/Python

Job description

Operate and improve enterprise Zero Trust access services that connect remote and on-site users to private applications and cloud services across hybrid, multi-cloud environments. Administer Zscaler ZPA/ZIA and connectors, integrate enterprise identity providers and MFA, and troubleshoot production access issues involving policies, authentication, device posture, DNS, TLS, and application connectivity.

Must be eligible to obtain a Public Trust Clearance.

Key responsibilities

• Configure and support Zscaler ZPA/ZIA, application segments, access policies, App Connectors, Cloud Connectors, and Client Connector integrations as applicable.
• Integrate SAML/OIDC identity providers, SSO/MFA, identity groups and attributes with access enforcement policies.
• Onboard private applications and users; validate authentication, authorization, DNS, TLS, application ports, and end-to-end connectivity.
• Triage access denials, connector outages, authentication errors, certificate failures, and policy conflicts; document root causes and fixes.
• Maintain runbooks, configuration baselines, logs, change records, and on‑call incident support.

Required skills and experience

• 7+ years in network security, ZTNA, identity security, or enterprise security operations.
• Production administration and troubleshooting of Zscaler ZPA/ZIA strongly preferred; comparable ZTNA experience considered when paired with Zscaler expertise.
• Hands‑on knowledge of SAML 2.0, OIDC/OAuth 2.0, Microsoft Entra ID or Okta, SSO, MFA, and identity troubleshooting.
• Solid TCP/IP, DNS, HTTP/S, TLS, firewall, routing, and application connectivity troubleshooting skills.
• Experience with SIEM/log analysis, change control, escalation, and production incident restoration.

Preferred qualifications

• Preferred: Zscaler product training/certifications; experience with PowerShell/Python, service APIs, and cloud applications.