ZR_2783_JOB

Zohorecruit; Whippany, Newark, New York (NJ, NJ, NY); Hybrid; USD 170,000 - 230,000; Full time

Job summary

Zscaler is seeking a ZPA Lead Engineer to design, secure, and optimize private access and segmentation across the ZPA platform. You will serve as a technical lead, defining access control and RBAC, and guiding architecture decisions for enterprise users and applications.

You will integrate Active Directory and LDAP, analyze logs for troubleshooting, mentor a team of ZPA engineers, and partner with the ZIA group to ensure consistent policy across Zscaler solutions.

Qualifications

• Extensive ZPA experience in architecture, design, and administration.
• Strong understanding of access control, segmentation, AD integration, and RBAC frameworks.
• Ability to interpret and leverage log data for troubleshooting and optimization.
• Proven background in solution architecture and systems engineering.

Responsibilities

• Serve as the technical lead and subject matter expert for the ZPA platform.
• Define and implement access control, segmentation, and RBAC policies.
• Integrate AD/LDAP group mappings to enforce access controls.
• Analyze Zscaler logs and telemetry for troubleshooting and tuning configurations.
• Review architecture documentation and engineering designs.
• Collaborate with Enterprise Security Architect to align ZPA strategy with security architecture.
• Provide hands-on engineering support during change windows and releases.
• Lead and mentor ZPA engineers and manage incidents.
• Partner with the ZIA Lead to ensure unified architecture across Zscaler solutions.

Skills

ZPA expertise

Access control

RBAC

Log analysis

Solution architecture

Leadership

Communication

Tools

Active Directory

LDAP

Job description

Zscaler Private Access (ZPA) LeadEngineer - REMOTE (Hybrid)

Whippany, Newark or NYC, United States | Posted on 12/08/2025

Zscaler Private Access (ZPA) LeadEngineer

USC/GC

The Zscaler Private Access (ZPA) Lead will act as the platform specialist responsible for designing, securing, and optimizing private access and segmentation across the Zscaler environment. This leader will focus on implementing robust access control policies, role-based segmentation, and scalable architectures supporting secure remote access for enterprise users and applications.

Key Responsibilities

• Serve as the technical lead and subject matter expert for the ZPA platform.
  
• Define and implement access control, segmentation, and RBAC policies.
  
• Integrate Active Directory (AD) and LDAP group mappings to enforce user and application access controls.
  
• Analyze and utilize Zscaler logs and telemetry for troubleshooting and tuning access configurations.
  
• Review solution architecture documentation, low-level engineering designs, and implementation frameworks.
  
• Work directly with the Enterprise Security Architect to align ZPA strategy with enterprise security architecture.
  
• Provide hands-on engineering support during change windows, release management, and operational transitions.
  
• Lead and mentor ZPA engineers, supporting daily operations and incident management.
  
• Partner with the ZIA Lead to ensure unified architecture and policy consistency across Zscaler solutions.
  

Required Skills & Experience

• Extensive Zscaler ZPA experience (architecture, design, and administration).
  
• Strong understanding of access control, segmentation, Active Directory integration, and RBAC frameworks.
  
• Ability to interpret and leverage log data for troubleshooting and configuration optimization.
  
• Proven background in understanding solution architecture and systems engineering, including decomposing and translating requirements into executable engineering tasks.
  
• Familiarity with enterprise security architecture principles and integration patterns.
  
• Excellent communication, documentation, and collaboration skills.
  
• Demonstrated leadership and mentoring ability within engineering teams.