Senior ZIA Engineer ( Zscaler )

Orion Innovation is a premier, award-winning, global business and technology services firm.  Orion delivers game-changing business transformation and product development rooted in digital strategy, experience design, and engineering, with a unique combination of agility, scale, and maturity.  We work with a wide range of clients across many industries including financial services, professional services, telecommunications and media, consumer products, automotive, industrial automation, professional sports and entertainment, life

sciences, ecommerce, and education.

Project Overview:

The work covers daily support and troubleshooting, support for expansion projects, and reporting and telemetry projects for Security Operations and adjacent teams. The environment serves a very large user base, so the role calls for advanced platform expertise, architectural knowledge, and enterprise routing skills. The engineer works across multiple teams. Experience with Zscaler’s DLP and AI capabilities is a plus.

Key Responsibilities:

• Provide daily operational support and troubleshooting for the Zscaler platform.
• Support project expansions and rollouts.
• Manage ZIA policy: advanced threat protection, Cloud Firewall, Sandboxing, DLP, and URL filtering.
• Manage ZPA zero trust network access: application segmentation, App Connectors, and access policies that replace legacy VPNs.
• Deploy and troubleshoot traffic forwarding at scale using GRE tunnels, IPsec tunnels, PAC files, and Zscaler Client Connector.
• Integrate Zscaler with enterprise identity providers using SAML 2.0 and SCIM, such as Microsoft Entra ID and Okta.
• Manage enterprise PKI and root certificates, and design SSL/TLS inspection policies that don’t break sensitive or business-critical applications.
• Isolate latency, packet loss, and application breaks using packet analysis and Zscaler Digital Experience (ZDX).
• Build reporting and telemetry projects for SecOps and other teams, and automate with Python, PowerShell, or Terraform against the Zscaler APIs.
• Work with other technology teams.
• Required Skills and Experience: Deep ZIA expertise at large scale (hundreds of thousands of users).
• ZPA and Zero Trust Network Access, including application segmentation, App Connectors, and access policy design.
• Traffic forwarding experience with GRE, IPsec, PAC files, and Zscaler Client Connector across diverse operating systems.
• Strong routing and architecture knowledge: BGP, OSPF, and SD-WAN integration.
• Identity integration through SAML 2.0 and SCIM.
• SSL/TLS inspection and enterprise PKI management.
• Advanced diagnostics with packet analyzers.
• Senior-level experience supporting a large global enterprise.
• Nice to have: Zscaler DLP and AI capabilities.
• Zscaler Digital Experience (ZDX) for proactive monitoring of end-user, network, and application performance.
• Automation and API experience with Python, PowerShell, or Terraform, including configuration backups, bulk policy updates, and log streaming (NSS).
• Reporting and telemetry experience supporting SecOps teams.
• Prior financial-services experience.
• Orion is an equal opportunity employer, and all qualified applicants will receive consideration for employment without regard to race, color, creed, religion, sex, sexual orientation, gender identity or expression, pregnancy, age, national origin, citizenship status, disability status, genetic information, protected veteran status, or any other characteristic protected by law.
• Candidate Privacy Policy
• Orion Systems Integrators, LLC and its subsidiaries and its affiliates (collectively, “Orion,” “we” or “us”) are committed to protecting your privacy. This
• Candidate Privacy Policy (orioninc.com)
• (“Notice”) explains: What information we collect during our application and recruitment process and why we collect it; How we handle that information; and
• How to access and update that information.
• Your use of Orion services is governed by any applicable terms in this notice and our general
• Privacy Policy.