Senior Network Security Engineer (Zscaler & Zero Trust)

Immediate need for a talented  Senior Network Security Engineer (Zscaler & Zero Trust) . This is a 12+ months contract opportunity with long-term potential and is located in US (Remote)  Please review the job description below and contact me ASAP if you are interested.

Job Diva ID: 26-10265

Pay Range: $60   - $70 /hour.  Employee benefits include, but are not limited to, health insurance (medical, dental, vision), 401(k) plan, and paid sick leave (depending on work location).

Key responsibilities:

• Zero Trust Architecture & Deployment (ZIA/ZPA)
• Support and orchestrate ongoing deployments utilizing Workspace ONE and Zscaler tenants.
• Design and manage ZIA, ZPA, and ZDX policies, including SSL Inspection, URL Filtering, and Sandbox policies.
• Perform operational duties involving ZPA Access Policies, Timeout Policies, and Client Forwarding Policies.
• Deploy and maintain ZPA App Connectors within data centers and cloud environments, specifically AWS.
• Endpoint Integration & Engineering (Zscaler Client Connector)
• Manage configurations, rolling updates, settings, and policies for the Zscaler Client Connector (ZCC) profiles.
• Ensure interoperability by maintaining SSL Inspection Exemption lists for applications with certificate pinning (e.g., Dropbox, Developer Tools) to prevent connectivity failures.
• Collaborate with the broader team on Data Loss Prevention (DLP) policy creation and monitoring.
• Network Security Operations & Troubleshooting
• Provide advanced Level 3 escalation support for all service desk issues related to ZIA, ZPA, and ZDX, managing relevant ticket queues in Client.
• Serve as the Level 3 escalation point for P1/P2 critical connectivity incidents.
• Perform Layer 3-7 troubleshooting utilizing tools such as Wireshark, MTR (My Traceroute), and Zscaler Analyzer.
• Analyze ZSATunnel and ZSATray logs to diagnose "Driver Errors" or "Filter Driver" conflicts.
• Conduct performance optimization by diagnosing latency issues using ZDX (Digital Experience) or Zscaler Cloud Performance Test tools, and accurately identifying if latency is introduced by the Service Edge, ISP, or local network.
• Interface directly with Zscaler Technical Account Managers (TAMs) and Support, providing necessary data such as HAR files and packet captures for root cause analysis.
• Performance Expectations (KPIs)
• Achievement of defined SLAs and KPIs.
• High percentage of deliverables and roadmap items completed on time and on budget.
• Maintaining high quality with near-zero Defect Leakage/Code Violations (max 0.5% defects detected after sprint closure).
• No introduction of new security flaws or performance degradation due to new code.
• Adherence to high Code Coverage targets (95% for New Code; >95% for Enhancements).

Key Requirements and Technology Experience:

• Key skills: -Zscaler, ZIA, Zero Trust, AWS
• We are seeking an experienced Network Security Engineer to manage and operate Client's Zero Trust security infrastructure, with a strong focus on Zscaler technologies (ZIA, ZPA, and ZDX).
• This role involves complex deployment, policy management, advanced troubleshooting, and acting as a high-level escalation point for critical connectivity and performance issues.

Our client is a leading IT industry  and we are currently interviewing to fill this and other similar contract positions. If you are interested in this position, please apply online for immediate consideration

Pyramid Consulting, Inc. provides equal employment opportunities to all employees and applicants for employment and prohibits discrimination and harassment of any type without regard to race, colour, religion, age, sex, national origin, disability status, genetics, protected veteran status, sexual orientation, gender identity or expression, or any other characteristic protected by federal, state, or local laws.

By applying to our jobs, you agree to receive calls, AI-generated calls, text messages, or emails from Pyramid Consulting, Inc. and its affiliates, and contracted partners. Frequency varies for text messages. Message and data rates may apply. Carriers are not liable for delayed or undelivered messages. You can reply STOP to cancel and HELP for help. You can access our privacy policy .

#accJ2W:CB3