Security Engineer - Zscaler - L2

Summary of Role

We are seeking an experienced Security Engineer with strong expertise in Zscaler cloud security solutions and Fortinet Forti Gate firewalls. The ideal candidate will be responsible for designing, implementing, managing, and optimising our security infrastructure to ensure robust protection across the enterprise environment. This role requires hands-on technical capability, strong problem‑solving skills, and the ability to work collaboratively with cross‑functional IT and security teams.

Responsibilities

• Design, configure, and maintain Zscaler Internet Access (ZIA) and Zscaler Private Access (ZPA).

• Oversee Zscaler security policies, URL filtering, SSL inspection, DLP, CASB, and threat protection features.

• Troubleshoot Zscaler user traffic, authentication issues (SAML/SSO), and policy enforcement.

• Optimise Zscaler configurations to enhance performance, security posture, and user experience.

• Perform log analysis and reporting using Zscaler dashboards, Zscaler Nanolog, and Splunk integrations.

Fortinet / Forti Gate Security

• Deploy, configure, and administer Forti Gate firewalls across distributed environments.

• Manage firewall policies, NAT rules, VPNs (IPsec/SSL), and high availability (HA) configurations.

• Implement and optimize Forti Analyzer, Forti Manager, and other Fortinet ecosystem tools.

• Conduct regular firewall audits, rule clean‑ups, and network segmentation improvements.

• Monitor threat alerts and respond to security incidents involving Fortinet infrastructure.

General Security Engineering

• Participate in security architecture design, vulnerability assessments, and risk mitigation planning.

• Manage identity and access controls, ensuring alignment with Zero Trust principles.

• Support incident response activities, including investigation, containment, and remediation.

• Develop and maintain documentation: SOPs, diagrams, runbooks, and security policies.

• Collaborate with network, cloud, and IT teams to ensure security alignment across the organization.

Experience

• Matric and Tertiary Qualification
• 5+ years of experience as a Security Engineer / Network Security Engineer.
• Hands‑on expertise with Zscaler
• Strong experience with Fortinet Forti Gate firewalls, including advanced security features.
• Solid understanding of Zero Trust architecture and cloud security best practices.
• Experience with VPN technologies, SD-WAN, DNS security, and SSL inspection.
• Strong troubleshooting and analytical skills (network packets, logs, security events).
• Familiarity with identity platforms (Azure AD, Okta, SAML, OAuth).

Preferred

• Zscaler Certified (ZCCA‑IA, ZCCP‑IA, ZCP‑PA)
• Fortinet NSE certification (NSE 4 / NSE 5 / NSE
  6)
• Experience with SIEM tools (Splunk, QRadar, Sentinel)
• Knowledge of scripting (Python, Power Shell) for automation
• Exposure to cloud platforms (Azure, AWS, GCP)