[Hiring] ZScaler Engineer @True Zero Technologies

Role Description

The Zscaler Engineer will support the design, implementation, production deployment, and operational transition of a Zscaler Private Access (ZPA) environment as part of an enterprise identity and secure access modernization initiative. The role will focus on replacing legacy VPN and site-to-site tunnel access with a scalable, Zero Trust–aligned access architecture supporting a large, distributed population of external users and organizations. The initial environment is expected to support approximately 16,600 external users across roughly 1,600 independent agencies, with the architecture designed to accommodate future expansion to the internal workforce.

The engineer will be responsible for translating a validated proof-of-value architecture into a secure production environment, including:

• ZPA tenant configuration
• App Connector architecture
• Application segmentation
• Access policies
• Client Connector and Browser Access strategies
• DNS design
• Identity integration
• Logging
• Migration planning
• Documentation
• Knowledge transfer

The position will work closely with cybersecurity, identity, networking, application, helpdesk, and agency stakeholders throughout implementation and rollout.

Qualifications

• Demonstrated hands-on experience designing, deploying, configuring, and supporting Zscaler Private Access (ZPA) in enterprise environments.
• Strong understanding of Zero Trust Network Access (ZTNA) concepts and replacing traditional VPN or network-level access with application-centric, identity-aware access controls.
• Experience deploying and troubleshooting Zscaler Client Connector, including environments where Client Connector must coexist with other endpoint VPN technologies.
• Experience architecting and administering ZPA App Connectors, App Connector Groups, application segments, segment groups, access policies, and Browser Access.
• Strong knowledge of enterprise networking concepts, including DNS, routing, firewall rules, TCP/IP, application connectivity, proxy technologies, VPNs, and data center connectivity.
• Experience with enterprise identity federation and access management technologies, preferably Okta, SAML, MFA, identity groups, and identity-based access policies.
• Experience integrating Zscaler logging and telemetry with SIEM or security analytics platforms; experience with Zscaler LSS and Rapid7 InsightIDR is highly desirable.
• Ability to perform end-to-end troubleshooting across endpoints, Zscaler services, App Connectors, enterprise networks, identity systems, and protected applications.
• Experience designing highly available and scalable ZPA environments, including connector sizing, redundancy, bandwidth planning, and capacity planning for large user populations.
• Experience developing migration plans and executing phased or wave-based migrations involving multiple independent organizations or business units.
• Strong documentation skills with experience producing solution designs, as-built documentation, administrator runbooks, deployment guides, troubleshooting procedures, and end-user documentation.
• Ability to communicate technical concepts to audiences with varying levels of expertise, including engineers, cybersecurity teams, support personnel, business stakeholders, and nontechnical external administrators.
• Experience conducting technical knowledge-transfer sessions and transitioning newly implemented platforms to operational support teams.
• Ability to coordinate activities across parallel identity, networking, security, application, and third-party vendor workstreams.

Requirements

• Zscaler certifications such as Zscaler Certified Engineer/Administrator in ZPA or Zero Trust Access.
• Applicable networking or cybersecurity certifications, and prior experience implementing Zscaler within government, public safety, criminal justice, or other highly regulated environments would be beneficial.

Benefits

• Competitive salary, paid twice per month
• Best in class medical coverage
• 100% of medical premiums covered by True Zero
• Company wide new business incentive programs
• Contribution Incentives (i.e. white papers, blog posts, internal webinars, etc.)
• 3 weeks of PTO starting + 11 Paid Holidays Annually
• 401k Program with 100% company match on the first 4%
• Monthly reimbursement of Cell Phone and Home Internet costs
• Paternity/Maternity Leave
• Investment in training and certifications to broaden and deepen your technical skills