Zero Trust Security Engineer

Varmoda is seeking a Zero Trust Security Engineer to operate, support, and improve enterprise Zero Trust access services across hybrid and multi-cloud environments. The role administers Zscaler services, integrates identity and MFA solutions, onboards private applications, and troubleshoots production access issues.

Responsibilities:

• Configure, administer, and support Zscaler ZPA and ZIA, including application segments, access policies, App Connectors, Cloud Connectors, and Client Connector integrations, as applicable
• Integrate SAML/OIDC identity providers, SSO, and MFA solutions with Zero Trust access services and enforcement policies
• Configure and manage identity groups and attributes used for authentication, authorization, and access-policy enforcement
• Onboard private applications and users while validating authentication, authorization, DNS resolution, TLS connectivity, application ports, and end-to-end application access
• Troubleshoot access denials, App Connector outages, authentication errors, certificate failures, policy conflicts, and application connectivity issues
• Perform root-cause analysis of production access incidents and document identified causes, resolutions, and remediation actions
• Analyze logs and security events to support incident investigation, escalation, and service restoration
• Maintain operational runbooks, configuration baselines, logs, change records, and other supporting documentation
• Participate in change-control activities, production incident response, escalation processes, and on-call support as required

Requirements:

• 7+ years of experience in network security, Zero Trust Network Access (ZTNA), identity security, or enterprise security operations
• Hands-on knowledge of SAML 2.0, OIDC/OAuth 2.0, SSO, and MFA
• Experience working with enterprise identity platforms such as Microsoft Entra ID or Okta, including identity and authentication troubleshooting
• Strong understanding of TCP/IP, DNS, HTTP/S, TLS, firewalls, routing, and application connectivity
• Experience troubleshooting complex network, identity, authentication, certificate, and application-access issues in production environments
• Experience with SIEM/log analysis, change control, incident escalation, and production service restoration
• Strong production administration and troubleshooting experience with Zscaler ZPA/ZIA preferred; comparable ZTNA experience may be considered when combined with Zscaler expertise
• Zscaler product training and/or certifications
• Experience using PowerShell or Python for administration, automation, or operational support
• Experience working with service APIs and integrations
• Experience supporting access to cloud applications and services
• Experience operating security services across hybrid and multi-cloud environments
• Preferred: Relevant Zscaler product training and/or Zscaler certifications