Network Administrator

ITEX, an ITCON Services Partner is seeking an Administrator 1:
Security Policy & User Support Lead to administer, optimize, and support TIGTA's (U.S. Treasury Inspector General for Tax Administration) enterprise security access environment. The Lead will have primary responsibility for Zscaler security policy administration, user connectivity support, data protection controls, and operational coordination across approximately 60 geographically distributed offices and 800 users.

At ITEX, we offer competitive compensation, paid training and development opportunities, healthcare benefits that start on your first day, work-life balance, and the opportunity to work alongside an amazing and growing team.

Applicants must be U.S. citizens
and must hold, or be able to
btain and maintain, a favorably adjudicated Tier 2 Moderate Risk Public Trust background investigation. Employment is contingent upon completion of TIGTA security screening, including applicable tax compliance, criminal-history, fingerprint, suitability, and continuous-vetting requirements.

• Administer and optimize Zscaler Internet Access (ZIA), Zscaler Private Access (ZPA), and Zscaler Digital Experience (ZDX) services supporting approximately 800 users across 60 office locations.
• Design, implement, test, and maintain web-filtering policies, SSL inspection, data loss prevention (DLP) rules, Cloud Access Security Broker (CASB) controls, cloud-application controls, bandwidth policies, and role-based access configurations.
• Lead integration of Microsoft Purview Information Protection with Zscaler DLP, including sensitivity-label synchronization, classification-based protection policies, Microsoft 365 repository scanning, and automated discovery and remediation of sensitive data.
• Plan and execute migration from blacklist-based web filtering to a role-based whitelist model by analyzing 90 to 120 days of traffic, developing business-use baselines, conducting shadow-mode testing, managing exceptions, and supporting phased production rollout.
• Provide day-to-day user support for secure internet and private-application access; diagnose client, authentication, policy, application, and connectivity issues; document resolutions; and communicate clearly with affected users.
• Investigate DLP alerts, policy violations, potential data-exfiltration events, and web-based security incidents; preserve appropriate records; coordinate with the Security Operations Center; and implement authorized emergency policy changes.
• Monitor platform health, user experience, traffic patterns, policy effectiveness, and service performance; identify trends and recommend improvements that strengthen security without unnecessarily disrupting mission operations.
• Coordinate with network administrators supporting Cisco switches, routers, firewalls, wireless controllers, and related infrastructure when resolving end-to-end connectivity or secure-access issues.
• Develop and maintain administrator runbooks, standard operating procedures, security-policy documentation, incident-response workflows, user guides, exception-request procedures, and knowledge articles.
• Deliver training and knowledge transfer to help desk personnel, backup administrators, and end users, including accessible training materials and support documentation consistent with Section 508 requirements.
• Support VoIP and Microsoft Teams Voice activities, related troubleshooting, and cross-functional telecommunications efforts as assigned.
• Protect Controlled Unclassified Information (CUI), use only Government-authorized systems and equipment, complete required annual cybersecurity/privacy and disclosure training, and comply with TIGTA nondisclosure and access-control requirements.