Zscaler Engineer

Zscaler SASE Engineer

PRISM is seeking a skilled Mid-Level Zscaler Engineer to be instrumental in administering, operating, and optimizing a critical U.S. government agency's Zscaler-based Secure Access Service Edge (SASE) environment in Washington, DC. This is an excellent opportunity for an IT or cybersecurity professional with proven hands-on experience managing Zscaler solutions and a comfort level within Microsoft-centric hybrid cloud environments. You will leverage your strong troubleshooting skills and meticulous attention to detail to advance Zero Trust and cloud security initiatives at the federal level. Collaborating closely with senior engineers and security teams, you will ensure consistent performance and robust policy enforcement across both cloud and on-premise systems.
Responsibilities:

• Administer and maintain the agency's Zscaler suite, including ZIA, ZPA, SAML integrations, policy tuning, and digital experience monitoring.
• Execute daily operational tasks, encompassing policy updates, proactive system monitoring, health checks, and efficient issue resolution.
• Develop, refine, and maintain clear SOPs and comprehensive technical documentation for Zscaler administration.
• Proactively monitor Zscaler dashboards and alerts to guarantee optimal service availability and exceptional user experience.
• Support seamless integration of Zscaler with key Microsoft technologies such as Azure AD and Conditional Access.
• Respond effectively to ServiceNow tickets and data calls, meticulously documenting troubleshooting steps and escalating issues as necessary.
• Collaborate closely with security teams to enforce critical security policies related to secure web gateway, CASB, DLP, firewall, and web proxies.
• Facilitate user onboarding and optimize Zscaler client connector configurations for enhanced security and usability.
• Contribute to threat intelligence activities to inform policy decisions and strengthen threat mitigation strategies.
• Participate actively in patching, upgrades, and thorough testing to ensure peak service performance and stability.
• Support targeted integration efforts with endpoint protection platforms, including CrowdStrike.

Qualifications & Requirements:

• Bachelor's degree in IT, Cybersecurity, or a related field, OR demonstrable equivalent hands-on experience.
• 2-5 years of direct experience supporting enterprise network or cloud security systems.
• Proven hands-on expertise in administering Zscaler Internet Access (ZIA) and/or Zscaler Private Access (ZPA).
• Solid understanding of fundamental security technologies, including secure web gateway, CASB, DLP, web proxy, firewall, antivirus, and sandboxing.