Network Administrator

ITEX
, is seeking a Network Administrator/Security Policy & User Support Lead to administer, optimize, and support TIGTA's (U.S. Treasury Inspector General for Tax Administration) enterprise security access environment. The Lead will have primary responsibility for Zscaler security policy administration, user connectivity support, data protection controls, and operational coordination across approximately 60 geographically distributed offices and 800 users.

The Lead will work independently to translate federal security requirements and business needs into sustainable access policies; troubleshoot user-impacting security and connectivity issues; coordinate incident response with network, help desk, and Security Operations Center personnel; and develop the documentation and training needed for reliable, compliant operations.

At ITEX, we offer competitive compensation and healthcare benefits as well as paid training and development opportunities that start on your first day, work-life balance, and the opportunity to work alongside an amazing and growing team.

Applicants must be U.S. Citizens or U.S. Permanent Residents
and must hold, or be able to obtain and maintain, a favorably adjudicated Tier 2 Moderate Risk Public Trust background investigation. Employment is contingent upon completion of TIGTA security screening, including applicable tax compliance, criminal-history, fingerprint, suitability, and continuous-vetting requirements.

• Administer and optimize Zscaler Internet Access (ZIA), Zscaler Private Access (ZPA), and Zscaler Digital Experience (ZDX) services supporting approximately 800 users across 60 office locations.
• Design, implement, test, and maintain web-filtering policies, SSL inspection, data loss prevention (DLP) rules, Cloud Access Security Broker (CASB) controls, cloud-application controls, bandwidth policies, and role-based access configurations.
• Lead integration of Microsoft Purview Information Protection with Zscaler DLP
  , including sensitivity-label synchronization, classification-based protection policies, Microsoft 365 repository scanning, and automated discovery and remediation of sensitive data.
• Plan and execute migration from blacklist-based web filtering to a role-based whitelist model by analyzing 90 to 120 days of traffic, developing business-use baselines, conducting shadow-mode testing, managing exceptions, and supporting phased production rollout.
• Provide day-to-day user support for secure internet and private-application access; diagnose client, authentication, policy, application, and connectivity issues; document resolutions; and communicate clearly with affected users.
• Investigate DLP alerts, policy violations, potential data-exfiltration events, and web-based security incidents; preserve appropriate records; coordinate with the Security Operations Center; and implement authorized emergency policy changes.
• Monitor platform health, user experience, traffic patterns, policy effectiveness, and service performance; identify trends and recommend improvements that strengthen security without unnecessarily disrupting mission operations.
• Coordinate with network administrators supporting Cisco switches, routers, firewalls, wireless controllers, and related infrastructure when resolving end-to-end connectivity or secure-access issues.
• Develop and maintain administrator runbooks, standard operating procedures, security-policy documentation, incident-response workflows, user guides, exception-request procedures, and knowledge articles.
• Deliver training and knowledge transfer to help desk personnel, backup administrators, and end users, including accessible training materials and support documentation consistent with Section 508 requirements.
• Support VoIP…