Note: The job is a remote job and is open to candidates in USA. Astir IT Solutions, Inc. is seeking a highly skilled Cloud Security Engineer to own the deployment, lifecycle management, and architectural configuration of an enterprise-wide Secure Access Service Edge environment. The role focuses on managing the Zscaler Client Connector ecosystem, configuring Zscaler security policies, integrating identity and authentication systems, and troubleshooting secure connectivity across corporate endpoints.
Responsibilities
- Package, distribute, and upgrade the Zscaler Client Connector (.msi, .pkg, .deb) silently across thousands of global endpoints utilizing Unified Endpoint Management platforms
- Configure Zscaler Internet Access (ZIA) and Zscaler Private Access (ZPA) profiles, including forwarding rules, PAC files, SSL/TLS inspection exclusions, and application segments
- Maintain seamless Single Sign-On (SSO) workflows by configuring Zscaler authentication against Cloud Identity Providers using SAML and SCIM protocols
- Act as the Tier-3 engineering lead for client connectivity anomalies, certificate chain errors, posture-check failures, and zero-trust routing loop mitigations
- Partner with Network Operations to audit and tune tunnel bypass strategies for performance-critical or latency-sensitive applications
Skills
- Minimum 10+ Years of Experience required
- Visa TypeUSC/GC
- • SASE Platforms: 3+ years of deep engineering experience explicitly administering Zscaler (ZIA, ZPA, ZDX, and ZCC)
- • Endpoint Management: Proven success scripting deployment strings and managing software delivery packages within Microsoft Intune, Jamf Pro, Tanium, or SCCM
- • Scripting & Automation: Strong command of PowerShell, Bash, or Python to interact with administrative CLI tools and pre-configure enterprise policy tokens
- • Core Networking: Absolute mastery of DNS architecture, Proxy Auto-Configuration (PAC) file syntax, TCP/IP, routing rules, and packet analysis via Wireshark
- • Identity Management: Experience integrating platforms with cloud enterprise identity systems like Microsoft Entra ID (Azure AD), Okta, or Ping Identity
- • Public Key Infrastructure (PKI): Comprehensive understanding of root and intermediate certificate distribution methodologies to enable secure HTTPS decryption workflows
- Zscaler Certified Cloud Associate (ZCCA-IA / ZCCA-PA)
- Zscaler Certified Cloud Professional (ZCCP-IA / ZCCP-PA)
- CompTIA Security+, Microsoft Certified: Security Operations Analyst, or equivalent network-security credentials
Benefits
- Only W-2 employment
- Remote work arrangement
Company Overview