Zero Trust Security Engineer – Zscaler | Eindhoven, Netherlands (Onsite)
Location: Eindhoven, Netherlands
Contract Duration: 6 Months
Start Date: ASAP
Work Model: Complete Onsite
Experience Required: 6–8 Years
We are seeking an experienced Zero Trust Security Engineer with strong expertise in Zscaler Cloud Security Services to support the design, implementation, and evolution of a modern Zero Trust Architecture (ZTA) environment. This role will focus on engineering secure access solutions, driving modernization initiatives, and transitioning enterprise environments away from legacy network-centric security models.
Key Responsibilities
-
Lead the engineering and optimization of the Zscaler Zero Trust Exchange platform, including:
-
Zscaler Internet Access (ZIA)
-
Zscaler Private Access (ZPA)
-
Zscaler Identity
-
Conduct Proof of Concept (POC) evaluations for new Zero Trust features and enhancements within development environments.
-
Design and execute migration strategies from traditional VPN and proxy technologies to identity-based access solutions.
-
Drive continuous improvements across Zero Trust platforms, including:
-
PAC file optimization
-
SSL inspection enhancements
-
API-driven policy automation
-
Provide validated Gold Image configurations and troubleshooting documentation to Operations and NOC teams.
-
Collaborate closely with Identity, Cloud, and Network teams to align Zero Trust policies with authentication and connectivity requirements.
-
Support operational readiness and contribute to enterprise-wide security modernization initiatives.
Required Skills & Experience
-
Expert-level experience with:
-
Zscaler Internet Access (ZIA)
-
Zscaler Private Access (ZPA)
-
Strong knowledge of:
-
Zero Trust Network Access (ZTNA)
-
Least-privileged access principles
-
Application segmentation and lateral movement prevention
-
Hands-on experience integrating Identity Providers such as:
-
Strong understanding of:
-
Proven experience with traditional security technologies:
-
Proxy solutions
-
VPN technologies (IPSec / SSL VPN)
-
Experience with network security engineering and enterprise access management.
Preferred Skills
-
Experience with:
-
Cisco Firepower
-
Cisco ISE
-
Fortigate / Fortimanager
-
Familiarity with enterprise load balancers and advanced firewall technologies.
-
Python scripting or API automation experience.
-
Relevant certifications such as:
-
Zscaler Certified Cloud Professional (ZCCP)