(Senior) Zscaler Engineer d/f/m

Department Insights 

As a Senior Zscaler Engineer, you will play a key role in shaping and operating a future-proof network for RWE across more than 250 locations worldwide. You will leverage your expertise to implement and continuously evolve the company-specific network architecture and strategy, ensuring alignment with the Group’s strategic objectives in close collaboration with internal stakeholders and external partners. 

You will join the Connectivity & Network Peripherals department – a dynamic and highly skilled team responsible for the end-to-end network and network security landscape, including 2nd and 3rd level support. Beyond day-to-day operations, the team plays a crucial role in driving forward-looking projects, enabling new business capabilities, and continuously improving the overall infrastructure across the Group. 

This position offers you a high level of ownership, the opportunity to work with cutting-edge technologies like Zscaler, and the chance to make a visible impact in a complex, international environment. 

Overview 

We are seeking an experienced Zscaler Engineer to design, implement, and support our enterprise Zero Trust security posture using the Zscaler platform (ZIA, ZPA, ZDX). The ideal candidate will have strong knowledge of clouddelivered security services, identityintegrated policy enforcement, and networking fundamentals. This role will work closely with Security, Networking, EUC, and Architecture teams to ensure secure, highperformance access for users, devices, and workloads. 

Key Responsibilities 

Platform Administration 

• Administer, maintain, and optimize Zscaler Internet Access (ZIA) and Zscaler Private Access (ZPA) tenant environments. 

• Create, update, and validate security policies, URL filtering, SSL inspection rules, access rules, and zero trust application segmentation. 

• Manage and maintain authentication integrations (IdP, SAML, SCIM, SSO, user provisioning). 

Zero Trust Architecture & Design 

• Contribute to Zero Trust strategies leveraging Zscaler Zero Trust Exchange. 

• Assist with designing secure access paths for internal/private applications using ZPA App Connectors and Segment Groups. 

• Support microsegmentation design and application mapping. 

Deployment & Configuration 

• Deploy Zscaler Client Connector (ZCC) across endpoints; manage upgrade cadence and posture rules. 

• Integrate Zscaler with identity providers (Azure AD / Okta), SIEM, EDR/XDR, and firewall platforms. 

• Work with network teams to ensure proper GRE/IPSec tunneling or PAC file configurations. 

Monitoring, Troubleshooting & Support 

• Use Zscaler logs, NSS feeds, and ZDX for diagnostics and performance troubleshooting. 

• Provide 3rdline support for connectivity, policy, and application issues. 

• Engage Zscaler Support when required and track case progress through resolution. 

Governance & Security Management 

• Ensure alignment with internal security frameworks and compliance requirements. 

• Produce documentation, runbooks, architectural diagrams, and operational guidelines. 

• Assist with audits, risk assessments, and policy reviews. 

Continuous Improvement 

• Monitor new features, releases, and best practice advisories from Zscaler. 

• Drive capability enhancements, automation, and platform optimization. 

• Support user experience improvements through ZDX insights and reporting. 

Required Skills & Experience 

Technical 

• Strong experience with ZIA, ZPA, and ZCC administration. 

• Solid understanding of Zero Trust Network Access (ZTNA) principles. 

• Deep knowledge of routing, TCP/IP, DNS, VPNs, proxies, TLS/SSL, and authentication flows. 

• Experience with Azure AD/Entra ID, Okta, or similar identity platforms. 

• Familiarity with SIEM integrations, log forwarding, and security monitoring. 

• Understanding of SDWAN integrations and networktocloud routing. 

Professional 

• Strong analytical, troubleshooting, and problemsolving skills. 

• Ability to communicate complex technical topics to both technical and nontechnical audiences. 

• Experience working in enterprise environments with change control and security governance. 

Preferred 

• Zscaler Certifications, such as:  

• ZDTA – Zscaler Digital Transformation Administrator 

• ZDTE – Zscaler Digital Transformation Engineer 

• ZDXA – Zscaler Digital Experience Administrator 

• Experience with automation (PowerShell, Python, Terraform). 

• Knowledge of cloud platforms (Azure, AWS, GCP). 

Education & Background 

• Degree in Computer Science, Cybersecurity, Networking, or equivalent experience. 

• 3–7 years experience in network security, cloud security, or endpoint security.