Zscaler Security Engineer

L.L.Bean • Freeport, ME

4d • $98,100 - $122,600 • Hybrid

About The Position

L.L.Bean is seeking a Zscaler Security Engineer to join its network team. The role is responsible for engineering, supporting, and continuously improving Zscaler services and critical infrastructure—including firewalls, load balancers, VPNs, and routed and switched networks—to strengthen secure connectivity across the enterprise. The engineer will design, implement, troubleshoot, and maintain network and security services; monitor performance; and support continuous improvement. The role also helps define and maintain secure, repeatable infrastructure through automation and Infrastructure as Code, and provides technical leadership and coaching to team members. The position may be hybrid based at L.L.Bean’s corporate headquarters in Freeport, Maine, but on-site work is required and the role participates in an on-call rotation. Candidates must be authorized to work in the United States; employment visa sponsorship is unavailable.

Requirements

• Bachelor’s degree in computer science or a related area.
• At least 7 years of experience.
• Hands-on technical knowledge of networking and security.
• Advanced knowledge of HTTP(S), TCP/IP, DNS, SSL, DHCP, BGP, OSPF, MPLS, wireless (802.11), network routing, firewalls, secure access, and switching.
• Solid proficiency with Palo Alto, Zscaler, Infoblox, ExtraHop, Splunk, Meraki, Netdisco, and F5 Network.
• Customer-service focus, excellent communication skills, and ability to work in a team-oriented environment.
• Authorization to work in the United States; the employer is unable to sponsor employment visas.
• Availability to participate in an on-call rotation; on-site work is required.

Nice To Haves

• Arista, Cisco, Palo Alto, or Zscaler certifications.
• Strong understanding of system management and automation tools such as Ansible, Terraform, and Arista CloudVision.
• Experience applying Infrastructure as Code practices to network and security environments.
• Knowledge of Windows Server and Linux operating systems.

Responsibilities

• Design, engineer, implement, and support firewalls, Zscaler Internet Access (ZIA), Zscaler Private Access (ZPA), and routed and switched networks.
• Engineer, implement, and maintain ZIA URL filtering, Cloud App Control, and Cloud Firewall policies, following change management procedures for configuration changes.
• Manage SSL inspection rules and bypass requests, validate business justifications, and document exceptions.
• Maintain custom URL categories, allowlists, and blocklists; respond to requests for site recategorization and access exceptions.
• Monitor and troubleshoot branch-to-Zscaler GRE and IPsec tunnels, including failover and location configuration.
• Support PAC file updates, traffic forwarding issues, and Zscaler Client Connector issues, including enrollment, forwarding profiles, and trusted network detection.
• Investigate blocked traffic and policy hits using ZIA logs and Web Insights, and escalate suspected policy design gaps to L3.
• Create and update ZPA application segments, segment groups, and server groups for approved application changes using Infrastructure as Code.
• Configure and maintain ZPA access policy rules using IdP groups, SAML/SCIM attributes, and posture profiles.
• Engineer and maintain ZPA infrastructure, including App Connectors and Service Edges; monitor health, perform upgrades, and deploy connectors using standardized provisioning and Infrastructure as Code practices.
• Troubleshoot user access issues involving Zscaler Client Connector, App Connectors, DNS resolution, and backend server reachability.
• Use Zscaler Digital Experience data to investigate user performance complaints and distinguish network, application, and device causes.
• Engineer, implement, and maintain Palo Alto firewall policies, NAT configurations, objects, and related security controls.
• Troubleshoot complex connectivity and security issues using traffic logs, packet captures, and policy analysis; coordinate with other engineering resources as needed and drive issues to resolution.
• Plan and support firmware upgrades, patching, high-availability validation, and other lifecycle activities during established maintenance windows.
• Respond within defined SLAs to alerts involving tunnel outages, connector failures, and firewall resource issues.
• Assist the SOC during incidents by retrieving ZIA, ZPA, and firewall logs and applying emergency blocks when directed.
• Participate in the after-hours on-call rotation for incidents and emergency changes.
• Partner with Network, Service Desk, and Infrastructure Operations teams to triage and resolve ZIA, ZPA, and firewall issues within defined SLAs.
• Lead or own troubleshooting of complex, high-impact Zscaler and firewall issues, working with engineering teams, vendors, and support resources to resolve incidents and identify permanent remediation opportunities.
• Monitor, troubleshoot, and continuously improve network performance and security.
• Help define and maintain secure, repeatable infrastructure through automation and Infrastructure as Code practices.
• Provide technical leadership and coaching to other team members.

Benefits

• Benefits package with programs and perks designed to support health and financial goals.
• Programs and support intended to help employees maintain work-life balance and recharge outdoors.

What This Job Offers

• Job Type: Full-time
• Career Level: Senior