Senior ZIA Engineer ( Zscaler )

Project Overview:

The work covers daily support and troubleshooting, support for expansion projects, and reporting and telemetry projects for Security Operations and adjacent teams. The environment serves a very large user base, so the role calls for advanced platform expertise, architectural knowledge, and enterprise routing skills. The engineer works across multiple teams. Experience with Zscaler's DLP and AI capabilities is a plus.

Key Responsibilities:

• Provide daily operational support and troubleshooting for the Zscaler platform.
• Support project expansions and rollouts.
• Manage ZIA policy: advanced threat protection, Cloud Firewall, Sandboxing, DLP, and URL filtering.
• Manage ZPA zero trust network access: application segmentation, App Connectors, and access policies that replace legacy VPNs.
• Deploy and troubleshoot traffic forwarding at scale using GRE tunnels, IPsec tunnels, PAC files, and Zscaler Client Connector.
• Integrate Zscaler with enterprise identity providers using SAML 2.0 and SCIM, such as Microsoft Entra ID and Okta.
• Manage enterprise PKI and root certificates, and design SSL/TLS inspection policies that do not break sensitive or business-critical applications.
• Isolate latency, packet loss, and application breaks using packet analysis and Zscaler Digital Experience (ZDX).
• Build reporting and telemetry projects for SecOps and other teams, and automate with Python, PowerShell, or Terraform against the Zscaler APIs.
• Work with other technology teams.

Required Skills and Experience:

• Deep ZIA expertise at large scale (hundreds of thousands of users).
• ZPA and Zero Trust Network Access, including application segmentation, App Connectors, and access policy design.
• Traffic forwarding experience with GRE, IPsec, PAC files, and Zscaler Client Connector across diverse operating systems.
• Strong routing and architecture knowledge: BGP, OSPF, and SD-WAN integration.
• Identity integration through SAML 2.0 and SCIM.
• SSL/TLS inspection and enterprise PKI management.
• Advanced diagnostics with packet analyzers.
• Senior-level experience supporting a large global enterprise.

Nice to Have:

• Zscaler DLP and AI capabilities.
• Zscaler Digital Experience (ZDX) for proactive monitoring of end-user, network, and application performance.
• Automation and API experience with Python, PowerShell, or Terraform, including configuration backups, bulk policy updates, and log streaming (NSS).
• Reporting and telemetry experience supporting SecOps teams.
• Prior financial-services experience.

Equal Opportunity:

Orion is an equal opportunity employer, and all qualified applicants will receive consideration for employment without regard to race, color, creed, religion, sex, sexual orientation, gender identity or expression, pregnancy, age, national origin, citizenship status, disability status, genetic information, protected veteran status, or any other characteristic protected by law.