Senior Zscaler Engineer
Required skills
- Zscaler ZIA
- Zscaler ZPA
- BlueCoat Proxy
- CASB
- Python
- Bash
- TCP/IP
- Unix/Linux CLI
- Wireshark
- HTTPWatch
Nice to have
- SAML
- Kerberos
- NTLM
- Data At Rest
- Data In Use
- Data In Motion
Role summary
BlackLake Security is seeking a remote Senior Zscaler Engineer for a project-based consulting role. The engineer will be responsible for designing, implementing, configuring, and optimizing Zscaler Internet Access (ZIA) and Zscaler Private Access (ZPA) solutions for clients. This role requires 5+ years of network security experience, with deep hands-on expertise in ZIA/ZPA, CASB deployment, scripting (Python, Bash), proxy solutions (BlueCoat), and network protocols (TCP/IP). Familiarity with authentication technologies (SAML, Kerberos, NTLM), data protection, web malware, Unix/Linux CLI, and Palo Alto firewalls is also valued. The position involves client collaboration, technical workshops, and advanced troubleshooting.
- Design and implement Zscaler Internet Access (ZIA) and Zscaler Private Access (ZPA) solutions tailored to client requirements.
- Configure, optimize, and troubleshoot ZIA and ZPA environments to ensure peak performance and security.
- Collaborate with clients to assess their security needs and develop customized Zscaler deployment strategies.
- Conduct technical workshops, training sessions, and knowledge transfer for client teams.
- Integrate Zscaler solutions with existing security tools, infrastructure, and frameworks.
- Provide advanced-level troubleshooting and support for Zscaler-related issues, including root cause analysis and resolution.
- Research and deploy Shadow IT/Unsanctioned Application products.
- Develop and maintain technical documentation, including design diagrams, configuration guides, and operational runbooks.
- Experience: 5+ years of network security experience within large-scale operations, including hands-on experience with BlueCoat Proxy and Zscaler ZIA/ZPA.
- Zscaler Expertise: In-depth knowledge and hands-on experience with ZIA and ZPA, including deployment, configuration, and troubleshooting.
- CASB Deployment: Hands-on experience with CASB design, architecture, and deployment (Symantec/BlueCoat, CloudSOC, etc.).
- Scripting: Proficiency in scripting languages like Python and Bash.
- Authentication Technologies: Good knowledge of NTLM, Kerberos, and SAML is a plus.
- Proxy Knowledge: Hands-on expertise with proxy solutions; BlueCoat highly desirable.
- Data Protection Practices: Familiarity with Data At Rest, Data In Use, and Data In Motion, including practical implementations.
- Web Malware Expertise: Practical knowledge of web malware, its propagation, and mitigation strategies.
- Network Protocols: Expertise in TCP/IP and related protocols, with experience using tools like Wireshark, HTTPWatch, tcpdump, Fiddler, and similar for HTTPS & TCP/IP analysis.
- Unix/Linux CLI: Working knowledge of Unix/Linux command-line interfaces.
- Palo Alto: Familiarity with Palo Alto firewalls.
- Preferred Certifications: Zscaler ZCCA-IA, ZCCP-IA, ZCCA-PA, ZCCP-PA.
Similar roles
- NetScout Engineer – OCI & AED SpecialistBlackLake Security · Dallas, TX · Onsite
- Sales Account ExecutiveBlackLake Security · Dallas, TX · Onsite
- ZScaler Engineer - part-time (R-00232)True Zero Technologies · Remote · Remote
Validation and Verification Engineer, Aviation EngineeringSkyryse · El Segundo, CA · Onsite
Senior Frontend EngineerTeamSnap · Remote · Remote- VCustomer Engineering LeadVeda · United States
