Zscaler Engineer

We are seeking a Zscaler Engineer to support a mission-critical U.S. government agency in the National Capital Region. This hybrid position involves managing and modernizing enterprise cybersecurity platforms, with a strong focus on Zscaler technologies (ZIA, ZPA, ZDX) and broader Secure Access Service Edge (SASE) implementations within a Microsoft-based environment.
The ideal candidate has hands-on experience with Zscaler services (ZIA, ZPA, ZDX) across cloud, network, and identity domains. This role supports operations, troubleshooting, and integration of Zscaler platforms with enterprise systems, while contributing to policy management, Zero Trust initiatives, process automation, and cross-team collaboration.
This role requires on site work in Washington, D.C. at least 3 days per week with remote work the other days.
Key Responsibilities:

• Deploy, configure, and manage Zscaler services (ZIA, ZPA, ZDX) and other security technologies such as EDR, DLP, secure web gateway, email security, IDPS, firewall, SIEM, and identity protection tools
• Integrate security solutions with Microsoft platforms including Azure AD, Conditional Access, Intune, and Microsoft Defender
• Configure and manage policies, SAML integrations, monitoring, and user onboarding for Zscaler platforms
• Monitor performance, security events, and traffic flow; troubleshoot connectivity, authentication, and application access issues
• Enforce security policies, ensure compliance, and optimize configurations to improve performance and user experience
• Respond to ServiceNow tickets, perform health checks, and support upgrades or migrations
• Write and maintain technical documentation (SOPs, change records) and automate routine tasks using scripting (PowerShell, Python, Bash)
• Collaborate with engineering, operations, and compliance teams to strengthen overall security posture

• Bachelor’s degree in Cybersecurity, IT, or related field (or 8+ years of equivalent experience)
• Minimum 5 years of cybersecurity experience supporting a broad range of tools across cloud, endpoint, identity, and network security domains
• 2+ years of hands-on experience administering Zscaler services (ZIA, ZPA, ZDX), including policy management, SAML integration, and performance monitoring
• Practical experience with tools and platforms such as EDR, DLP, secure web gateway, email security, IDPS, firewalls, SIEM, and identity protection solutions
• Proficiency in Windows and/or Linux system administration, scripting (e.g., PowerShell, Python, Bash), and integrating cloud-native security technologies
• Strong analytical, troubleshooting, and communication skills

• Experience in federal or regulated environments
• Familiarity with DNS-layer protection, threat analytics platforms, and Zero Trust architecture
• Exposure to tools such as CrowdStrike, Office 365, Microsoft Defender, and Intune
• Relevant certifications such as Zscaler Certified Administrator, Security+, CySA+, GSEC, Microsoft SC-300, CCNP Security, PCNSE, or Splunk Certified Architect

• Must be eligible to obtain a U.S. Public Trust Clearance

• Competitive salary based on experience
• Profit sharing distributed twice a year
• 15 days of paid time off and 10 paid holidays per year
• 401(k) with employer matching
• Health and dental benefits
• Opportunity to work with other talented technical professionals

SharePointXperts is an Equal Opportunity/Affirmative Action employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, national origin, disability, or protected Veteran status. 
SharePointXperts participates in E-Verify. Click the following links for important information about our participation in this program and your rights.
https://www.e-verify.gov/sites/default/files/everify/posters/IER_RightToWorkPoster%20Eng_Es.pdf
https://www.e-verify.gov/sites/default/files/everify/posters/EVerifyParticipationPoster.pdf