Lead Infrastructure Security Engineer – Zscaler

We are seeking a Security Engineer with intermediate to advanced hands-on experience in Zscaler ZPA (Zscaler Private Access) and ZDX (Zscaler Digital Experience) to help design, implement, and support secure, high-performance access to applications and services. This role is ideal for an engineer who is comfortable operating in modern Zero Trust environments and enjoys solving complex connectivity and performance challenges.

Here is What You Can Expect on a Typical Day

• Design, deploy, and maintain Zscaler ZPA (Z Scaler Private Access) for secure, zero-trust access to internal applications and hybrid-cloud environments.
• Configure and optimize ZDX (Z Scaler Digital Experience) to monitor, analyze, and improve end-user digital experience
• Configure and optimize ZCC (Z Scaler Client Connector) for secure conditional access, posture assessment, to ensure device identification consistent with zero trust controls
• Troubleshoot application access, performance, and connectivity issues using Zscaler tools and logs
• Partner with network, security, and application teams to onboard new applications into ZPA
• Assist with policy creation, segmentation, and access controls aligned with Zero Trust principles
• Analyze ZDX data to identify root causes of user experience issues and recommend improvements
• Support ongoing operational needs, upgrades, and best-practice improvements
• Document designs, configurations, and operational procedures

The Skills & Expertise You Bring

Required Qualifications

• Proven hands-on experience with Zscaler ZPA in a production environment
• Experience using Zscaler ZDX for monitoring and troubleshooting user experience
• Familiarity with identity providers (Entra / Azure AD, Okta, etc.)
• Experience migrating from traditional VPNs to ZPA
• Experience troubleshooting complex network and application performance issues
• Ability to work independently and collaborate across technical teams

Preferred / Nice-to-Have

• Zscaler certifications (ZPA, ZDX, or Zscaler Internet Access)
• Scripting or automation experience (PowerShell, Python, etc.)
• Experience with cloud platforms (AWS, Azure)
• Application connectivity (web client/ server) troubleshooting.