Sr. Zscaler Security Engineer

About the role

The Senior Zscaler Security Engineer is responsible for the end‑to‑end management, optimisation and troubleshooting of the organisation’s Zscaler security stack, including ZIA, ZCC, CASB and SaaS Security APIs. You will ensure cloud‑based security controls are robust, compliant and aligned with industry best practices.

Key responsibilities

• Configure and administer Zscaler Internet Access, including traffic routing, firewall, VPN, DNS, ACL, SAML/SCIM authentication and security profiles.
• Set up and maintain GRE/IPsec tunnels, virtual service edges, locations and client profiles, and fine‑tune forwarding, application and PAC policies.
• Design, implement and optimise access control, URL filtering, threat prevention, SSL inspection, DLP and bandwidth‑management policies.
• Deploy and manage Zscaler CASB, including DLP, tokenisation, encryption, rights management and threat protection for cloud applications.
• Monitor performance using MTR, Zscaler Analyzer and Cloud Performance Test tools, troubleshoot misconfigurations, and coordinate escalations with Zscaler Support.
• Generate dashboards, custom reports and compliance documentation for traffic, threats, usage and regulatory requirements.
• Track capacity trends, forecast bandwidth and session needs, and maintain comprehensive configuration and audit documentation.

Required profile

• Bachelor’s degree in Computer Science, Engineering or a related discipline.
• Minimum 5 years of experience in network security, cloud security or Zscaler platform administration.
• Proven ability to design secure architectures and respond to security incidents.

Required skills

• Zscaler Internet Access (ZIA) and Zscaler Cloud Connector (ZCC).
• Zscaler CASB and SaaS Security API.
• GRE and IPsec tunnelling.
• SAML, SCIM, firewall, VPN, DNS and ACL configuration.
• SSL inspection, AV, sandboxing, IPS and DLP policy creation.
• Cloud App Control, risk assessment, browser isolation and traffic shaping.
• Performance monitoring tools such as MTR, Zscaler Analyzer and log analysis.