Zscaler Engineer

Brainhunter is currently seeking the services of a “ Zscaler Engineer ” for a contract role with one of our Valued Clients.

• Rate: Open to market
• Work Location: Onsite in Calgary, : 7550 Ogden Dale Road SE, Calgary, Canada
• Hours: 37.5/week
• Duration: 6 months

We are seeking a highly skilled Zscaler Expert to lead the design, implementation, optimization, and operational support of cloud-delivered security solutions using the Zscaler platform. The ideal candidate will possess deep expertise in Zero Trust architecture, secure web gateway technologies, SSE/SASE frameworks, identity integration, and enterprise network security transformation.

This role will partner closely with cybersecurity, infrastructure, networking, cloud, identity, and endpoint engineering teams to modernize secure access capabilities and improve organizational security posture.

Key Responsibilities

• Architect, deploy, and manage Zscaler solutions including:
• Zscaler Internet Access (ZIA)
• Zscaler Private Access (ZPA)
• Zscaler Digital Experience (ZDX)
• Cloud Firewall and CASB capabilities
• Design and implement Zero Trust Network Access (ZTNA) strategies aligned with enterprise security architecture.
• Lead migration initiatives from legacy VPN and perimeter-based architectures to cloud-native SASE/SSE solutions.
• SSL inspection
• URL filtering
• Data Loss Prevention (DLP)
• Cloud application controls
• Sandbox policies
• Browser isolation
• Access segmentation policies
• Identity providers (Okta, Azure AD/Entra ID, Ping, etc.)
• SIEM platforms
• Endpoint protection tools
• MFA solutions
• SD-WAN and network infrastructure
• PAC files
• GRE/IPSec tunnels
• Proxy chaining
• Authentication flows
• Certificate management
• Traffic forwarding
• Develop operational standards, runbooks, architecture diagrams, and implementation documentation.
• Conduct security assessments and provide recommendations to improve cloud security posture and user experience.
• Monitor platform health, performance, and user experience metrics using ZDX and other observability tools.
• Collaborate with incident response and SOC teams during cybersecurity investigations involving web traffic, cloud applications, or remote access.
• Stay current on evolving threats, Zscaler platform enhancements, and SASE/SSE industry trends.

Required Qualifications

• Bachelor’s degree in Cybersecurity, Information Technology, Computer Science, or related field (or equivalent experience).
• 5+ years of cybersecurity or network security experience.
• 3+ years of hands-on experience implementing and administering Zscaler solutions.
• Zero Trust Architecture
• SASE/SSE frameworks
• Secure Web Gateway technologies
• DNS, TCP/IP,
• VPN technologies
• Identity and access management
• Network segmentation
• ZIA, ZPA, and ZDX administration
• SSL/TLS inspection and certificate management
• Cloud security architectures
• Microsoft 365 and SaaS application security
• Proxy technologies and traffic steering methods
• Azure, AWS, and/or Google Cloud
• SIEM tools such as Splunk or Sentinel
• Endpoint security platforms
• Scripting/automation using PowerShell, Python, or APIs
• Strong analytical, troubleshooting, and communication skills

Preferred Certifications

• Zscaler Certified Professional (ZCP)
• Zscaler Certified Architect (ZCA)
• CISSP
• CCSP
• CCNP Security
• GIAC certifications
• Microsoft Azure Security certifications

How to Apply

Online: To apply for this and other suitable exciting opportunities with Brainhunter Systems Ltd., you can apply online through the button on the top right. AI tools may be used for initial screening of applicants.

E-mail: Please email Reema at ***email_hidden*** with an attached copy of your CV.

Brainhunter is an equal opportunity employer and is committed to providing a workplace free from harassment and discrimination. Brainhunter encourages applications from women, Indigenous peoples, veterans, persons with disabilities, members of visible minorities and persons of all races, ethnic origins, religions, abilities, sexual orientations, and gender identities and expressions. We provide accommodation upon request during the recruitment process; please let the job poster know.

We thank all applicants for their interest, however only those candidates selected for Interviews will be contacted.