Zscaler Network SME & Zero Trust Architect

Agile Defense, Inc.; Ashburn (VA); On-site; USD 170,000 - 185,000; Full time

Job summary

Agile Defense, Inc. seeks a Zscaler Solutions Architect SME to drive enterprise-wide SASE implementations for DHS.

You will serve as the technical authority for designing, deploying, and optimizing ZIA, ZPA, and ZDX across multi-cloud and on-prem environments, partnering with IAM teams to implement SAML/SCIM and ensure zero-trust access. You will lead policy tuning, PAC file troubleshooting, and agent lifecycle management across Windows, macOS, iOS, and Android, while coordinating escalations

Qualifications

• Design, deploy, administer, upgrade and optimize Zscaler deployments across ZIA, ZPA, ZDX.
• Create, audit, tune security policies (URL filtering, DLP, SSL/TLS inspection, sandbox).
• Formulate and execute ZPA access policies for least-privilege private access.
• Provide Tier-3/4 escalation for proxy routing, PAC debugging, identity integration, latency issues.
• Manage ZCC deployment and upgrades across macOS, Windows, iOS, Android.
• Leverage ZDX and cloud analytics to isolate UX degradation; configure SIEM integrations.
• Partner with IAM teams to configure SAML/SCIM with IdPs (Okta, Azure AD, Ping).
• RCA and post-incident documentation; cross-functional coordination.
• Travel up to 20% within the United States.
• On-call readiness for 24/7 incidents and emergency changes.
• Evaluate enterprise tech integrations (Splunk, Cribl, Okta, AWS, Azure, GitHub).

Responsibilities

• Design, deploy, administer, upgrade and optimize Zscaler deployments (ZIA, ZPA, ZDX) across multi-cloud and on-prem environments.
• Create, audit, and tune security policies including URL filtering, DLP, SSL/TLS inspection and sandbox policies.
• Formulate and execute ZPA access policies for least-privilege direct access to internal apps in private clouds and data centers.
• Provide Tier-3/Tier-4 escalation support for proxy routing, PAC file debugging, identity integration, authentication drops and latency issues.
• Manage ZCC deployment, configuration, forwarding profiles, upgrades across macOS, Windows, iOS and Android.
• Leverage ZDX and cloud analytics to isolate user experience degradation; configure alerts and SIEM log integration (Splunk, Cribl).
• Partner with IAM teams to configure SAML/SCIM with IdPs (Okta, Azure AD, Ping Identity).
• RCA or post-incident reporting for mission-critical apps and infrastructure; document root causes and corrective actions.
• Travel up to 20% within the United States.
• Support 24/7 on-call rotation for Tier 3 incidents and Emergency Change Requests.

Skills

ZIA

ZPA

ZCC

ZDX

PAC Files

PowerShell

TCP/IP

DNS

Routing

Firewalls

VPNs

TLS/SSL

Education

Zscaler ZIA administration certification

Zscaler ZPA administration certification

Zscaler ZDX training

Cisco CCNA

Cisco CCNP

CompTIA Security+

Zscaler Zero Trust training

Tools

Splunk

Cribl

Okta

AWS

Azure

GitHub

Docker

Git

VS Code

Visual Studio

Job description

Agile Defense, Inc. seeks a Zscaler Solutions Architect SME to drive enterprise-wide SASE implementations for DHS.

You will serve as the technical authority for designing, deploying, and optimizing ZIA, ZPA, and ZDX across multi-cloud and on-prem environments, partnering with IAM teams to implement SAML/SCIM and ensure zero-trust access. You will lead policy tuning, PAC file troubleshooting, and agent lifecycle management across Windows, macOS, iOS, and Android, while coordinating escalations