SlipstreamJobs tracks this role from the company's public career site. Apply directly on the employer's site.
Zscaler is seeking a Senior IT Security Operations Engineer to join the Corporate Infrastructure team. This hybrid role (remote within the US with a preference for San Jose, CA) reports to the Director of Zscaler on Zscaler and serves as the operational backbone of the security team.
You will provide day-to-day operational support, configuration, policy tuning, and platform health monitoring for Zscaler Internet Access (ZIA), Zscaler Private Access (ZPA), Zscaler Digital Experience (ZDX), AI Security, and Cloud Security (CSPM/DSPM) platforms. Key responsibilities include:
- Configure and maintain zero trust policies covering user-to-application access, posture checking, SSL/TLS inspection, content filtering, and access control
- Deploy and tune Cloud Security Posture Management (CSPM) and Data Security Posture Management (DSPM) policies, collaborating with environment owners on remediation
- Utilize ZDX to monitor application and user experience issues, correlating findings with network and security telemetry to identify root causes
- Support DLP policy tuning, alert triage, SOP documentation, and on-call incident response
- Help automate repetitive workflows to improve operational efficiency
The ideal candidate is a problem-solver who acts like an owner, driven by innovation and curiosity about how systems work. You should be skilled at distilling complex cloud, network, and security architectures into clear operational procedures and building strong cross-functional partnerships.
Required qualifications: 5+ years in IT security operations, network security, or related technical domain; hands-on experience administering Zscaler ZIA and/or ZPA; working knowledge of zero trust concepts; practical understanding of cloud architecture (AWS, Azure, GCP), OS fundamentals, networking, and authentication protocols. Demonstrated curiosity and active exploration of AI tools is essential. U.S. Citizenship is required due to specific customer security requirements.
Preferred qualifications include hands-on configuration experience with SSL/TLS inspection, DLP, SIEM integration, log streaming, and EDR platforms (CrowdStrike Falcon); strong network troubleshooting skills; and active technical certifications (Zscaler ZCCA/ZCCP, CrowdStrike CCFA/CCFR, Security+, or CISSP).
