Cloud Security Engineer – SASE & Zero Trust

Hiring:
Cloud Security Engineer - SASE & Zero Trust

Job Title: Cloud Security Engineer - SASE & Zero Trust
Experience: 12+ Years
Location: Remote
Duration: Long-Term Contract
Employment Type: W2 AND C2C
Visa : or USC

We are looking for an experienced Cloud Security Engineer with strong hands-on expertise in Zscaler, SASE, Zero Trust, endpoint security, networking, and identity management
.

• Design, deploy, configure, and manage enterprise Zscaler SASE environments.
• Administer Zscaler Internet Access (ZIA), Zscaler Private Access (ZPA), Zscaler Client Connector (ZCC), and Zscaler Digital Experience (ZDX).
• Package and deploy ZCC across enterprise endpoints using Intune, Jamf Pro, Tanium, SCCM
  , or similar UEM platforms.
• Configure PAC files, forwarding rules, SSL/TLS inspection, bypass rules, application segments, and security policies
  .
• Configure ZPA App Connectors and application segments for Zero Trust access.
• Integrate Zscaler with Microsoft Entra /Azure AD, Okta, or Ping Identity using SAML/SCIM.
• Provide L3/Tier-3 troubleshooting for ZCC connectivity, certificate errors, posture-check failures, routing issues, and application-access problems.
• Analyze network traffic using Wireshark, TCPDump, and packet captures
  .
• Manage DNS, TCP/IP, routing, VPN, proxy, and secure web gateway issues.
• Configure and troubleshoot SSL/TLS inspection and PKI certificate chains
  .
• Monitor and optimize SASE connectivity and tunnel-bypass strategies.
• Develop automation using Python, Power Shell, or Bash
  .
• Collaborate with Endpoint, Network, IAM, and Security Operations teams.

• 11+ years of overall IT/Network/Security experience
• 3+ years of hands-on Zscaler engineering
• Strong experience with ZIA, ZPA, ZCC, and ZDX
• Experience with Intune, Jamf Pro, Tanium, SCCM
  , or equivalent UEM platforms
• Strong Power Shell, Python, or Bash scripting
• Strong knowledge of DNS, PAC files, TCP/IP, routing, VPN, proxy technologies, and Wireshark
• Experience with Entra /Azure AD, Okta, or Ping Identity
• Strong knowledge of SAML, SCIM, SSO, and MFA
• Strong understanding of PKI, SSL/TLS, root/intermediate certificates, and HTTPS inspection
• Hands-on SASE and Zero Trust architecture experience

• Zscaler Certified Cloud Associate (
  ZCCA-IA / ZCCA-PA
  )
• Zscaler Certified Cloud Professional (
  ZCCP-IA / ZCCP-PA
  )
• CompTIA Security+
• Microsoft Security certifications
• CCNP Security or equivalent