Note: The job is a remote job and is open to candidates in USA. Prosum is seeking a contract Technical Project Manager to lead the rollout and optimization of Zscaler Internet Access and Zscaler Private Access. This role requires hands-on technical expertise and involves managing project plans, coordinating with various teams, and ensuring compliance with configuration standards.
Responsibilities
- Own the project plan for ZIA/ZPA rollout: phasing, milestones, risk log, and stakeholder reporting
- Help in design and configuration of ZIA policies (URL filtering, SSL inspection, DLP, cloud app control) and ZPA app segments, policies, and connector architecture
- Partner with IT Security, Network, and Identity teams (Okta integration, device posture/Device Assurance) to align Zscaler policy with existing access control models
- Coordinate with endpoint teams (JAMF/Intune) on client connector deployment across macOS and Windows fleets
- Support BYOD/MAM scoping decisions where Zscaler intersects with mobile access
- Document configuration standards and decisions for compliance purposes, including UK Cyber Essentials Plus (CE+) control mapping
- Identify and remediate gaps between the current state and the target architecture
- Run cutover/migration planning (legacy Global Protest VPN decommission)
- Provide status reporting and executive-level summaries suitable for leadership review
Skills
- 5+ years of technical project management experience in enterprise security/network transformation projects
- Deep hands-on expertise in both ZIA and ZPA — architecture, policy configuration, troubleshooting
- Experience with SSL inspection deployment, DLP policy design, and Zero Trust access models
- Familiarity with identity providers (Okta preferred) and device posture/conditional access concepts
- Strong stakeholder management and technical writing skills — this role will produce compliance-facing documentation
- Zscaler certification(s) preferred (ZDTA, ZDTP, or equivalent)
- Prior experience supporting a compliance certification effort (CE+, SOC 2, ISO 27001) where Zscaler was in scope
- Experience with JAMF and/or Intune-managed endpoint environments
- Experience migrating from legacy VPN to SSE architecture
Company Overview