Zscaler Specialist

Project overview

We are seeking a Zscaler Specialist to drive tenant separation and build-out activities for a net-new Zscaler deployment (ZIA and ZPA) for a retained entity. The successful candidate will have deep hands-on experience with Zscaler administration, policy design, and configuration management via Infrastructure as Code (Terraform). You will be responsible for enforcing corporate separacy, managing transitional cross-tenant access, cleaning up divested environments, and ensuring high-quality technical documentation within an Agile framework.

Key Responsibilities

Required Skills & Experience

Core Zscaler Expertise

Automation & Identity

Security & Infrastructure Foundations

• Tenant Build-Out & Migration: Build a full net-new Zscaler tenant (ZIA/ZPA), deploy ZPA App Connectors, establish GRE tunnels, and clean up retained data from the divested tenant.
• Separacy & Access Management: Implement bidirectional separacy controls, configure SAML/OIDC identity federation (eg, Okta), establish attribute-based user routing, and manage transitional cross-tenant access.
• Operations & Reporting: Monitor performance via ZDX, set up independent tenant reporting (Zscaler 360i), generate service availability reports, and support devolved policy models using GitOps.
• Cross-Functional Collaboration: Partner with routing, workplace, and identity teams alongside Zscaler Professional Services to ensure seamless MDM, edge, and client configurations.
• Zscaler Platform: Deep administration of ZIA (DLP, SSL inspection, Firewall) and ZPA (App Connectors, application segments, access policies).
• Architecture Integration: Deployment of Client Connector, GRE/IPSec tunnels, ZDX monitoring, and managing multi-tenant divestiture scenarios.
• Infrastructure as Code: Managing Zscaler configurations using the Zscaler Terraform provider, GitHub CI/CD pipelines, and GitOps practices.
• Identity & Access: SAML/OIDC federation, Okta (or equivalent IdP), SCIM provisioning, and attribute-based access control.
• Scripting & Data: Daily use of Git/GitHub, working knowledge of Python (Zscaler SDK), and comfort with JSON, YAML, and HCL formats.
• Network Security: Zero Trust Network Access (ZTNA) principles, Legacy VPN migrations (Cisco ASA/AnyConnect), and cloud network architecture (AWS, Azure, or GCP).
• General Networking: Strong understanding of routing, DNS, IP Addressing, change management, and technical document authoring.

Project details

• Start: flexible
• Duration: 6 months
• Remote: onsite
• Location: England, United Kingdom, GB