Job Description

Zero Trust Security Engineer – Zscaler | Eindhoven, Netherlands (Onsite)

Location: Eindhoven, Netherlands

Contract Duration: 6 Months

Start Date: ASAP

Work Model: Complete Onsite

Experience Required: 6–8 Years

We are seeking an experienced Zero Trust Security Engineer with strong expertise in Zscaler Cloud Security Services to support the design, implementation, and evolution of a modern Zero Trust Architecture (ZTA) environment. This role will focus on engineering secure access solutions, driving modernization initiatives, and transitioning enterprise environments away from legacy network-centric security models.

Key Responsibilities

• 
  Lead the engineering and optimization of the Zscaler Zero Trust Exchange platform, including:
  • 
    Zscaler Internet Access (ZIA)
  • 
    Zscaler Private Access (ZPA)
  • 
    Zscaler Identity
• 
  Conduct Proof of Concept (POC) evaluations for new Zero Trust features and enhancements within development environments.
• 
  Design and execute migration strategies from traditional VPN and proxy technologies to identity-based access solutions.
• 
  Drive continuous improvements across Zero Trust platforms, including:
  • 
    PAC file optimization
  • 
    SSL inspection enhancements
  • 
    API-driven policy automation
• 
  Provide validated Gold Image configurations and troubleshooting documentation to Operations and NOC teams.
• 
  Collaborate closely with Identity, Cloud, and Network teams to align Zero Trust policies with authentication and connectivity requirements.
• 
  Support operational readiness and contribute to enterprise-wide security modernization initiatives.

Required Skills & Experience

• 
  Expert-level experience with:
  • Zscaler Internet Access (ZIA)
  • Zscaler Private Access (ZPA)
• 
  Strong knowledge of:
  • 
    Zero Trust Network Access (ZTNA)
  • 
    Least-privileged access principles
  • 
    Application segmentation and lateral movement prevention
• 
  Hands-on experience integrating Identity Providers such as:
  • 
    Okta
  • 
    Azure AD
• 
  Strong understanding of:
  • 
    SAML
  • 
    SCIM
  • 
    OIDC
• 
  Proven experience with traditional security technologies:
  • 
    Proxy solutions
  • 
    VPN technologies (IPSec / SSL VPN)
• 
  Experience with network security engineering and enterprise access management.

Preferred Skills

• 
  Experience with:
  • 
    Cisco Firepower
  • 
    Cisco ISE
  • 
    Fortigate / Fortimanager
• 
  Familiarity with enterprise load balancers and advanced firewall technologies.
• 
  Python scripting or API automation experience.
• 
  Relevant certifications such as:
  • 
    Zscaler Certified Cloud Professional (ZCCP)