Engineer, CyberSecurity - Zscaler

T-Mobile US • Bellevue, WA

298d

About The Position

At T-Mobile, we invest in YOU! Our Total Rewards Package ensures that employees get the same big love we give our customers. All team members receive a competitive base salary and compensation package - this is Total Rewards. Employees enjoy multiple wealth-building opportunities through our annual stock grant, employee stock purchase plan, 401(k), and access to free, year-round money coaches. That's how we're UNSTOPPABLE for our employees! Are you ready to make difference in the world of wireless security? Then come join T-Mobile's Cybersecurity team as our next Engineer, Zscaler DevOps! We are seeking a skilled and experienced DevOps Engineer to help us implement and support Zscaler ZIA and ZPA. As a ZIA (Zscaler Internet Access) and ZPA (Zscaler Private Access) DevOps Engineer, you will play a meaningful role in crafting, implementing, and maintaining the infrastructure and systems that support our organization's Zscaler environment. You will collaborate with cross-functional teams to ensure smooth deployments, automate processes, and optimize performance to meet our security and networking needs.

Responsibilities

• Performs security, compliance, and risk assessments on projects throughout project lifecycle.
• Collaborates and participates on identification of security needs & recommends plans/resolutions.
• Implements, tests & monitors info security improvements.
• Maintains visibility inside & outside of info security at an Engineering professional level.
• Collaborate with groups such as end user support, service desk, development teams, etc.
• Help deliver Zscaler solutions across the organization.
• Familiarity with implementation of various threat modeling approaches pertaining to one or more of the following STRIDE, PASTA, TRIKE, ATTACK TREE, DREAD, KILL CHAIN, CAPEC, Mobile Application threat model, Cyber Threat Tree, and data flow diagram.
• Responsible for other Duties/Projects as assigned by business management as needed.
• Design and implement the infrastructure required to support our Zscaler environment.
• Collaborate with network and security teams to architect scalable and highly available solutions.
• Configure and deploy Zscaler components such as web security, data loss prevention, cloud application security, and SSL inspection.
• Establish and maintain a robust and efficient CI/CD pipeline for deploying Zscaler updates and configurations.
• Automate the deployment process, including testing, monitoring, and rollback mechanisms.
• Continuously improve the deployment pipeline to enhance efficiency and reduce downtime.
• Develop and maintain configuration management processes and tools for managing Zscaler configurations.
• Ensure consistency and version control across the Zscaler infrastructure.
• Automate configuration changes and enforce compliance with security policies and standards.
• Implement monitoring solutions to proactively determine and resolve issues within the Zscaler environment.
• Monitor system performance, network traffic, and security events.
• Optimize Zscaler performance through capacity planning, load balancing, and fine-tuning configurations.
• Collaborate with security and network teams to investigate and resolve incidents related to the Zscaler platform.
• Troubleshoot issues with connectivity, performance, and security.
• Develop and maintain runbooks and playbooks for incident response and recovery procedures.
• Work closely with security teams to ensure Zscaler configurations align with security policies, standard processes, and regulatory requirements.
• Perform security assessments, vulnerability scans, and penetration tests.
• Implement security controls, access management, and encryption mechanisms as needed.
• Collaborate with cross-functional teams, including network engineers, security analysts, and developers, to ensure smooth integration of Zscaler into the overall infrastructure.
• Document system configurations, procedures, and troubleshooting guidelines.

Benefits

• Competitive base salary
• Annual stock grant
• Employee stock purchase plan
• 401(k)
• Access to free, year-round money coaches

What This Job Offers

• Industry: Telecommunications