Senior Security Engineer

Worldwide Clinical Trials•Durham, NC

1d•$121,500 - $240,500

About The Position

The Senior Security Engineer plays a key role in supporting Worldwide Clinical Trials’ Zero Trust and cloud-first security strategy. Reporting to the Senior Director of Information Security, this role is responsible for leading the implementation, management, and optimization of Zscaler technologies across the enterprise. The Senior Engineer works closely with stakeholders across IT, including Infrastructure and Security Operations to ensure consistent enforcement of access control, data protection, and user experience monitoring through Zscaler platform.

Requirements

Deep understanding of Zscaler architecture, deployment models, and policy frameworks.
Strong analytical and troubleshooting skills, especially in large-scale cloud security environments.
Proficiency with automation tools and scripting languages (e.g., Python, PowerShell, REST APIs).
Effective communication skills, capable of translating complex technical topics for both technical and non-technical audiences.
Familiarity with adjacent technologies such as endpoint detection and response (EDR), identity and access management (IAM), and data loss prevention (DLP).
Bachelor’s degree in Computer Science, Information Technology, or related field with a minimum of 5 years of experience in enterprise security engineering, with at least 2 years directly supporting Zscaler solutions or high school diploma/GED with a minimum of 7 years of experience in enterprise security engineering, with at least 2 years directly supporting Zscaler solutions.
Hands-on experience with ZIA, ZPA, and ZDX in a production environment.
Strong understanding of cloud security concepts, identity management, and Zero Trust principles.
Experience with automation for security operations and policy management using APIs.

Nice To Haves

Experience working in regulated industries or supporting compliance requirements such as GxP, HIPAA, or GDPR is a plus.
Zscaler certifications (ZCCA-IA, ZCCA-PA, ZCCP) are highly desirable.

Responsibilities

Design, deploy, and manage Zscaler solutions, including: Zscaler Internet Access (ZIA): URL filtering, SSL inspection, cloud firewall, DNS control, CASB, and DLP. Zscaler Private Access (ZPA): Application segmentation, identity-based access, SAML/SSO integration. Zscaler Digital Experience (ZDX): End-user performance monitoring and diagnostics.
Lead incident response and troubleshooting related to Zscaler, such as DNS categorization issues, SSL decryption errors, or access anomalies.
Collaborate with Infrastructure and Security Operations teams to enforce endpoint posture checks, DLP policies, and access control rules across Zscaler platforms.
Integrate Zscaler logs and telemetry into SIEM platforms to support threat detection, forensics, and compliance reporting.
Develop and maintain automation scripts and workflows using Zscaler APIs to support policy enforcement, reporting, and operational efficiency.
Conduct maturity assessments and contribute to the Zscaler roadmap aligned to Zero Trust architecture goals.
Serve as the subject matter expert (SME) on Zscaler for cross-functional initiatives, vendor engagements, and system design reviews.
Perform other duties as assigned. The duties and responsibilities listed above are representative of the nature and level of work assigned and are not necessarily all-inclusive.