Senior ZIA Engineer ( Zscaler )
NJ · NY · Dallas, TX · Jersey City, NJ · London · New York, NY · Posted Oct 13, 2026
At a glance
- Location
- NJ · NY · Dallas, TX · Jersey City, NJ · London · New York, NY
About the role
- The Senior ZIA Engineer (Zscaler) provides daily operational support, troubleshooting, and project expansion support for a very large global enterprise user base.
- This position requires advanced platform expertise, architectural knowledge, and enterprise routing skills to manage the Zscaler platform across multiple teams.
Responsibilities
- Provide daily operational support and troubleshooting for the Zscaler platform.
- Support project expansions and rollouts.
- Manage ZIA policy: advanced threat protection, Cloud Firewall, Sandboxing, DLP, and URL filtering.
- Manage ZPA zero trust network access: application segmentation, App Connectors, and access policies that replace legacy VPNs.
- Deploy and troubleshoot traffic forwarding at scale using GRE tunnels, IPsec tunnels, PAC files, and Zscaler Client Connector.
- Integrate Zscaler with enterprise identity providers using SAML 2.0 and SCIM, such as Microsoft Entra ID and Okta.
- Manage enterprise PKI and root certificates, and design SSL/TLS inspection policies that don't break sensitive or business-critical applications.
- Isolate latency, packet loss, and application breaks using packet analysis and Zscaler Digital Experience (ZDX).
- Build reporting and telemetry projects for SecOps and other teams, and automate with Python, PowerShell, or Terraform against the Zscaler APIs.
- Work with other technology teams.
Requirements
- Deep ZIA expertise at large scale (hundreds of thousands of users).
- ZPA and Zero Trust Network Access, including application segmentation, App Connectors, and access policy design.
- Traffic forwarding experience with GRE, IPsec, PAC files, and Zscaler Client Connector across diverse operating systems.
- Strong routing and architecture knowledge: BGP, OSPF, and SD-WAN integration.
- Identity integration through SAML 2.0 and SCIM.
- SSL/TLS inspection and enterprise PKI management.
- Advanced diagnostics with packet analyzers.
- Senior-level experience supporting a large global enterprise.
Preferred qualifications
- Zscaler DLP and AI capabilities.
- Zscaler Digital Experience (ZDX) for proactive monitoring of end-user, network, and application performance.
- Automation and API experience with Python, PowerShell, or Terraform, including configuration backups, bulk policy updates, and log streaming (NSS).
- Reporting and telemetry experience supporting SecOps teams.
- Prior financial-services experience.
Skills
- Zscaler
- ZIA
- ZPA
- GRE
- IPsec
- PAC Files
- Zscaler Client Connector
- SAML 2.0
- SCIM
- Microsoft Entra ID
- Okta
- PKI
Show all 15 skills
- BGP
- OSPF
- SD-WAN
