Senior Zscaler Security Engineer

Canadian Pacific Kansas City / CPKC is hiring a full-time experienced Security Engineer to join their team. Candidates who identify as one of the following can apply: women, Black, Indigenous, People of Color (BIPOC), members of the LGBTQ+ community and people with disabilities.“We are seeking a Senior Zscaler Security Engineer to spearhead the evolution of CPKC’s Zero Trust security strategy. As the subject matter expert for ZIA, ZPA, and ZDX, you will architect and automate next-generation secure access solutions, drive cloud and network security innovation, and help shape the future of enterprise cybersecurity. Partnering across Infrastructure, Cloud, IAM, Security, and DevOps teams, you will deliver scalable, resilient, and seamless security experiences that enable the business to move faster and more securely.”Application is still ongoing until said otherwise. Ideal candidate must possess a bachelor’s degree in Cybersecurity, Information Technology, Computer Science, Software Engineering, or equivalent practical experience in either of the field. Experience on APIs, Python/PowerShell automation, Terraform, Git, and CI/CD, with the ability to translate business and security requirements into scalable, automated solutions is a great plus.Candidates must also have expertise in Zero Trust, SASE/SSE, cloud security, IAM, networking, SSL/TLS, and enterprise access technologies.CPKC offers good tidings competitive salaries, part-time study program, annual fitness subsidy. Successful applicant will perform the following functionsLead the architecture, deployment, and optimization of Zscaler solutions, including ZIA, ZPA, ZDX, CASB, DLP, and Cloud FirewallDesign and implement Zero Trust and SASE strategies that enable secure, seamless access across the enterpriseDevelop and automate Zscaler configurations, policies, and operational workflows using APIs, Python, and PowerShellBuild and manage Infrastructure as Code (Terraform) solutions with robust version control and governance practicesCreate self-service tools and automation that reduce manual effort, increase consistency, and improve operational efficiencyEstablish and maintain CI/CD pipelines to automate testing, validation, deployment, and rollback of security configurationsTroubleshoot complex security, network, and automation issues across cloud, proxy, authentication, and access environmentsDrive security posture improvements through assessments, policy optimization, compliance reporting, and operational metricsPartner with Infrastructure, Cloud, IAM, DevOps, and SOC teams to deliver secure, scalable, and resilient access solutionsMentor engineers on automation, scripting, infrastructure as code, and security best practices to build enterprise-wide capability
#J-18808-Ljbffr