Senior Zscaler Engineer (Zero Trust)

Job Description:

Tria Federal is seeking an experienced Senior Zscaler Engineer to establish and maintain the agency's security infrastructure by configuring, managing, and integrating Zscaler services across the enterprise environment. This role oversees the administration of ZIA, ZPA, ZCC, and ZDX and the engineer will identify and resolve complex or atypical Zscaler issues to ensure maximum reliability, security, and user experience across the platform.

In support of the agency's modernization initiatives, the Senior Zscaler Engineer will also provide technical expertise across Zero Trust, secure remote access, and clouddelivered security architectures, including validating Zscaler policy designs, optimizing App Segments and Connectors, and enabling secure, reliable access to internal and external applications and websites.

Basic Requirements

• Senior Zscaler Engineer responsible for designing, configuring, monitoring, and troubleshooting ZIA, ZPA, ZCC, and ZDX across enterprise environments.
• Ten (10) yearsof experience in a large government organization withsix (6) yearsin technical leadership, includingfour (4) yearsimplementing and troubleshooting ZIA and ZPA with expertise in authentication flows, SSL inspection, DNS/routing interactions, identity integrations (SAML/SCIM), App Segments, Connectors, and trafficforwarding methods (ZCC, PAC files, GRE/IPsec tunnels).
• Experience supporting modernization efforts that include migrating user access policies from legacy McAfee Web Proxy servers and Check Point firewall rule sets into ZIA and ZPA, ensuring alignment with Zero Trust principles.
• Four (4) yearsof experience supporting clouddelivered security or Zero Trust architectures with strong knowledge of identity, segmentation, certificate management, and endpoint posture controls.
• Thorough knowledge of telecommunications, network security, and Zero Trust best practices with awareness of cloud security fundamentals such as identitybased access, segmentation, and leastprivilege design.
• Exceptional customer service orientation, written and oral communication skills, with the ability to explain Zscaler concepts to technical and nontechnical stakeholders.
• Bachelor's degree in Information Technology, Cybersecurity or a related field.
• Preferred certifications: Zscaler ZIA Administrator, ZPA Administrator, Zscaler Certified Cloud Professional (ZCCP), Zscaler Certified Cloud Engineer (ZCCE).

Responsibilities

• Troubleshoots and resolves complex Zscaler issues across ZIA, ZPA, ZCC, and ZDX, including policy enforcement, authentication failures, application access problems, and userexperience degradation.
• Deploy, configures, and maintains Zscaler services endtoend, managing App Connectors, App Segments, SSL inspection, DLP policies, and trafficforwarding methods.
• Monitors security events using ZDX, ZIA/ZPA logs while performing root cause analysis for connectivity, authentication, and application performance issues.
• Manages identity integrations, enforces security policies, validates compliance requirements, and continuously tunes configurations to strengthen Zero Trust posture and improve user experience.
• Conducts routine health checks, migrations, and documents changes through SOPs, engineering designs, and implementation procedures.
• Collaborates with engineering, operations and compliance teams while mentoring junior staff and contributing to knowledge-sharing efforts across Zscaler operations and secure access best practices.

ABILITY TO OBTAIN A DOL PUBLIC TRUST CLEARANCE (Must be a U.S. Citizen or Green Card Holder residing in the United States for more than 3.5 years

Work Location: 100% ON-SITE SUPPORT in Suitland, MD