Zscaler & Zero-Trust Network Security Engineer

McGough Construction; Roseville (MN); Hybrid; USD 95,000 - 110,000; Full time

Benefits offered by this job

Insurance coverage for medical, dental

Generous retirement plans

Voluntary benefit plans

Parental leave

Substantial paid time off

Holiday pay

Job summary

Cybersecurity Jobs is seeking a Network Security Engineer to design, implement, and operate the company’s Zscaler environment and related security controls, following zero-trust and secure access principles. This role collaborates with cross-functional teams to protect connectivity, segmentation, identity, data protection, and policy management across on‑prem and cloud resources.

The engineer will design secure connectivity, integrate with identity, endpoint, cloud, and SIEM platforms, and

Qualifications

• 2+ years of network, cloud, or security engineering experience with Zscaler ZIA, ZPA, and Client Connector.
• Strong knowledge of TCP/IP, DNS, HTTP/S, TLS, certificates, proxies, and data protection.
• Experience designing secure connectivity for internet, SaaS, and cloud workloads.

Responsibilities

• Design, implement, administer, and troubleshoot Zscaler ZIA, ZPA, Client Connector, and App Connectors.
• Secure employee access to internet, SaaS, and private apps with policy controls.
• Develop and maintain target architecture and roadmap for Zscaler and zero-trust networking.

Skills

Network security

Cloud security

Policy management

Documentation

Cross-functional collaboration

Troubleshooting

Communication

Tools

Zscaler ZIA

Zscaler ZPA

Client Connector

App Connectors

TLS inspection

Terraform

Python

PowerShell

REST APIs

Git

CI/CD

Job description

Cybersecurity Jobs is seeking a Network Security Engineer to design, implement, and operate the company’s Zscaler environment and related security controls, following zero-trust and secure access principles. This role collaborates with cross-functional teams to protect connectivity, segmentation, identity, data protection, and policy management across on‑prem and cloud resources.

The engineer will design secure connectivity, integrate with identity, endpoint, cloud, and SIEM platforms, and