Senior ZIA Engineer ( Zscaler )
Read straight from Orion Innovation's careers page, verified 15h ago.Seekless can tailor your résumé to it.
Seekless can write your résumé for this posting first.
Before you apply
SalaryNo pay range posted
LocationDallas, TX, Jersey City, NJ, London, England, New York, NY, NJ; NY
SenioritySenior
DepartmentDelivery
Company size1,001–5,000 people
PostedOct 13, 2026 · 3w ago
Verified live15h ago
At a glanceSummarised by Seekless from the posting.
Deep ZIA expertise at large scale (hundreds of thousands of users)
ZPA and Zero Trust Network Access, including application segmentation, App Connectors, and access policy design
Traffic forwarding experience with GRE, IPsec, PAC files, and Zscaler Client Connector across diverse operating systems
Strong routing and architecture knowledge: BGP, OSPF, and SD-WAN integration
Identity integration through SAML 2.0 and SCIM
SSL/TLS inspection and enterprise PKI management
Advanced diagnostics with packet analyzers
Senior-level experience supporting a large global enterprise
Zscaler DLP and AI capabilities
Zscaler Digital Experience (ZDX) for proactive monitoring of end-user, network, and application performance
Automation and API experience with Python, PowerShell, or Terraform, including configuration backups, bulk policy updates, and log streaming (NSS)
Reporting and telemetry experience supporting SecOps teams
Prior financial-services experience
Skills
Zscaler
ZIA
ZPA
Zscaler Client Connector
GRE
IPsec
PAC files
SAML 2.0
SCIM
Microsoft Entra ID
Okta
PKI
SSL/TLS
BGP
OSPF
SD-WAN
Python
PowerShell
Terraform
Zscaler Digital Experience (ZDX)
packet analyzers
About the company
Orion Innovation is a premier, award-winning, global business and technology services firm. Orion delivers game-changing business transformation and product development rooted in digital strategy, experience design, and engineering, with a unique combination of agility, scale, and maturity. We work with a wide range of clients across many industries including financial services, professional services, telecommunications and media, consumer products, automotive, industrial automation, professional sports and entertainment, life sciences, ecommerce, and education.
Project Overview:
The work covers daily support and troubleshooting, support for expansion projects, and reporting and telemetry projects for Security Operations and adjacent teams. The environment serves a very large user base, so the role calls for advanced platform expertise, architectural knowledge, and enterprise routing skills. The engineer works across multiple teams. Experience with Zscaler’s DLP and AI capabilities is a plus.
Key Responsibilities:
•
Provide daily operational support and troubleshooting for the Zscaler platform.
•
Support project expansions and rollouts.
•
Manage ZIA policy: advanced threat protection, Cloud Firewall, Sandboxing, DLP, and URL filtering.
•
Manage ZPA zero trust network access: application segmentation, App Connectors, and access policies that replace legacy VPNs.
•
Deploy and troubleshoot traffic forwarding at scale using GRE tunnels, IPsec tunnels, PAC files, and Zscaler Client Connector.
•
Integrate Zscaler with enterprise identity providers using SAML 2.0 and SCIM, such as Microsoft Entra ID and Okta.
•
Manage enterprise PKI and root certificates, and design SSL/TLS inspection policies that don’t break sensitive or business-critical applications.
•
Isolate latency, packet loss, and application breaks using packet analysis and Zscaler Digital Experience (ZDX).
•
Build reporting and telemetry projects for SecOps and other teams, and automate with Python, PowerShell, or Terraform against the Zscaler APIs.
•
Work with other technology teams.
Required Skills and Experience:
•
Deep ZIA expertise at large scale (hundreds of thousands of users).
•
ZPA and Zero Trust Network Access, including application segmentation, App Connectors, and access policy design.
•
Traffic forwarding experience with GRE, IPsec, PAC files, and Zscaler Client Connector across diverse operating systems.
•
Strong routing and architecture knowledge: BGP, OSPF, and SD-WAN integration.
•
Identity integration through SAML 2.0 and SCIM.
•
SSL/TLS inspection and enterprise PKI management.
•
Advanced diagnostics with packet analyzers.
•
Senior-level experience supporting a large global enterprise.
Nice to have:
•
Zscaler DLP and AI capabilities.
•
Zscaler Digital Experience (ZDX) for proactive monitoring of end-user, network, and application performance.
•
Automation and API experience with Python, PowerShell, or Terraform, including configuration backups, bulk policy updates, and log streaming (NSS).
•
Reporting and telemetry experience supporting SecOps teams.
•
Prior financial-services experience.
Legal
Orion is an equal opportunity employer, and all qualified applicants will receive consideration for employment without regard to race, color, creed, religion, sex, sexual orientation, gender identity or expression, pregnancy, age, national origin, citizenship status, disability status, genetic information, protected veteran status, or any other characteristic protected by law.
Candidate Privacy Policy
Orion Systems Integrators, LLC and its subsidiaries and its affiliates (collectively, “Orion,” “we” or “us”) are committed to protecting your privacy. This Candidate Privacy Policy (orioninc.com) (“Notice”) explains:
•
What information we collect during our application and recruitment process and why we collect it;
•
How we handle that information; and
•
How to access and update that information.
Your use of Orion services is governed by any applicable terms in this notice and our general Privacy Policy.
More roles at Orion Innovation