Zscaler Integration Engineer - Mid

VIATEQ Corporation•Washington, DC

2d•$100,000 - $130,000•Hybrid

About The Position

VIATEQ Corporation is hiring a mid-level Zscaler Integration Engineer to support enterprise network security operations and IT administrative and operational services for a federal government client. The role engineers, implements, administers, and supports enterprise Zscaler security capabilities across a geographically distributed environment spanning on-premises infrastructure, cloud platforms, and hybrid networks. Work is primarily at the client site in Washington, DC, with work also permitted at approved remote or telework locations. The engineer contributes to the network security team under the technical leadership of the Senior Zscaler Integration Engineer. The position works with network and security engineers, cloud operations teams, identity and access management specialists, and Government stakeholders to keep Zscaler platforms correctly configured, reliably operated, and aligned with enterprise security requirements, federal cybersecurity frameworks, and Zero Trust objectives. The role covers Zscaler Internet Access (ZIA), Zscaler Private Access (ZPA), Zscaler Client Connector, and Zscaler Digital Experience (ZDX). Work includes platform configuration and monitoring, identity integrations, security-event support, troubleshooting, change management, documentation, and compliance and authorization-to-operate (ATO) support. The successful candidate will have hands-on Zscaler experience, a sound understanding of SASE, ZTNA, enterprise networking, and federal compliance requirements, and the ability to take on increasing technical responsibility. A bachelor’s degree in a relevant field is required, although an equivalent combination of education and directly relevant experience may be considered. The position requires 3–5 years of relevant hands-on experience, including 2–3 years working with ZIA and/or ZPA in an enterprise environment. An active security clearance, or the ability to obtain and maintain the required government background investigation and IT access authorizations, is required; specific clearance requirements are confirmed at offer. The stated compensation range is $100,000–$130,000, based on experience, location, and other factors.

Requirements

Bachelor’s degree in computer science, information technology, cybersecurity, network engineering, or a related field from an accredited college or university; an equivalent combination of education and directly relevant experience may be considered.
3–5 years of hands-on experience in network security engineering, cloud security, or a closely related discipline.
At least 2–3 years of demonstrated hands-on experience engineering and administering Zscaler ZIA and/or ZPA in an enterprise environment.
Hands-on experience configuring ZIA security policies, including URL filtering, SSL inspection, application control, and threat prevention.
Experience supporting ZPA application access configuration, including application segment definition, app connector management, and access policy development.
Familiarity with enterprise identity-provider integration concepts, including SAML, OIDC, and SCIM, as applied to Zscaler authentication and directory synchronization.
Active security clearance or ability to obtain and maintain a government background investigation and all requisite IT access authorizations.
Technical proficiency in ZIA administration, including URL filtering, SSL/TLS inspection, application control, DLP, and advanced threat protection.
Experience administering ZPA application segments, app connectors, access policies, and identity-provider integrations.
Understanding of SASE and ZTNA principles and their application to enterprise internet security, private application access, and cloud-delivered policy enforcement.
Familiarity with Zscaler Client Connector deployment and management across Windows, macOS, and mobile device environments.
Understanding of enterprise networking concepts, including TCP/IP, DNS, routing, GRE and IPsec tunneling, and traffic forwarding architectures.
Knowledge of federal cybersecurity frameworks and requirements, including NIST SP 800-53, FISMA, FedRAMP, NIST SP 800-207, and OMB M-22-09.
Experience preparing and executing platform change requests, implementation plans, rollback procedures, and CAB submissions.
Strong analytical and troubleshooting skills for diagnosing and resolving ZIA and ZPA connectivity, performance, and policy enforcement issues in a production enterprise environment.
Strong written and verbal communication skills, including the ability to produce operational documentation, change request packages, and technical status reports for technical and non-technical audiences.

Nice To Haves

Prior experience supporting Zscaler platform engineering and administration on a federal IT program.
Hands-on experience with ZDX monitoring and administration.
Familiarity with federal cybersecurity compliance frameworks, including NIST SP 800-53, FISMA, and FedRAMP, as applied to cloud security administration and ATO documentation.
Zscaler Certified Cloud Professional (ZCCP) – ZIA certification.
Zscaler Certified Cloud Professional (ZCCP) – ZPA certification.
Zscaler Certified Cloud Administrator (ZCCA) – ZIA or ZPA certification, or active pursuit of certification.
CompTIA Security+, CompTIA Network+, or equivalent foundational cybersecurity or networking certification.
CISSP or an equivalent senior cybersecurity certification.
Microsoft SC-900, SC-300, or an equivalent Microsoft identity platform certification.
Experience administering Microsoft Entra ID and/or Okta, including SAML applications, conditional access policies, and SCIM provisioning.
Familiarity with ZDX application performance probes and digital experience reporting.
Familiarity with Zscaler Posture Control cloud security posture management capabilities.
Experience integrating Zscaler logs with SIEM platforms, including Syslog, Cloud NSS feeds, and log source onboarding.
Basic Python, PowerShell, or Bash scripting proficiency for API integration, task automation, and configuration management.
Experience with AWS and/or Microsoft Azure Government cloud security operations and cloud networking relevant to ZPA app connectors and Zscaler integration.
Familiarity with the MITRE ATT&CK framework and its use in threat prevention policy development, detection support, and security posture assessments.
Experience supporting cloud security platform incident response, including Zscaler log analysis and policy-level investigations.
Familiarity with FedRAMP continuous monitoring and ATO documentation and evidence collection.
Familiarity with Section 508 compliance requirements for security dashboards and reporting tools.

Responsibilities

Engineer, implement, and administer ZIA internet security policies and configurations, including URL filtering, application control, SSL/TLS inspection, and advanced threat protection.
Configure and maintain ZIA traffic forwarding, including Client Connector forwarding profiles, GRE and IPsec tunnels, and PAC files.
Assist with ZIA DLP and CASB policies and configurations, and monitor platform health, traffic performance, policy effectiveness, and emerging threats.
Manage ZIA SSL/TLS inspection settings, certificate trust, bypass exceptions, performance impacts, and policy lifecycle activities.
Generate and analyze ZIA traffic logs, threat reports, and URL filtering reports; troubleshoot connectivity, policy enforcement, and performance issues and perform root-cause analysis.
Support ZPA application access configuration, including application segments, server groups, app connectors, and identity-based access policies with device posture and MFA conditions.
Deploy, maintain, monitor, and troubleshoot ZPA app connectors across on-premises and cloud environments; review platform health, access sessions, and policy enforcement.
Integrate ZPA with enterprise identity providers, including Microsoft Entra ID and Okta, supporting SAML and SCIM configuration and troubleshooting.
Generate and analyze ZPA access logs and policy reports for security monitoring, compliance reporting, and access-pattern analysis.
Administer and maintain Zscaler Client Connector across managed endpoints, including deployment, configuration, health monitoring, forwarding and app profiles, and endpoint-management integration.
Monitor Client Connector deployment coverage and agent health, investigate configuration drift and connectivity or functionality issues, and implement corrective actions.
Support ZDX administration and monitoring, including user experience, application performance, network-path health, probes, alerts, dashboards, and performance reports.
Support Zscaler identity and access management integrations using SAML, OIDC, and SCIM; monitor identity-provider and directory synchronization health and support MFA configuration.
Monitor Zscaler security event logs, threat alerts, and DLP reports; triage and escalate suspected security events and support SIEM detection content and threat intelligence configurations.
Provide Zscaler log analysis and configuration support for incident response, including investigation, containment, remediation, and policy tuning.
Prepare Zscaler change requests for CAB review, including implementation plans, impact assessments, rollback procedures, and test plans; coordinate approvals and implementation and conduct post-implementation reviews.
Develop and maintain Zscaler runbooks, troubleshooting guides, policy documentation, standard operating procedures, configuration records, and change logs.
Maintain Zscaler platform compliance with applicable federal requirements, including NIST SP 800-53, FISMA, FedRAMP, NIST SP 800-207, OMB M-22-09, and client-specific policies.
Assist with ATO activities, including security-control documentation, SSP contributions, continuous-monitoring evidence, audit artifacts, compliance assessments, baseline remediation, and vulnerability management.