Note: The job is a remote job and is open to candidates in USA. Varmoda is seeking a Zero Trust Security Engineer to operate, support, and improve enterprise Zero Trust access services across hybrid and multi-cloud environments. The role administers Zscaler services, integrates identity and MFA solutions, onboards private applications, and troubleshoots production access issues.
Responsibilities
- Configure, administer, and support Zscaler ZPA and ZIA, including application segments, access policies, App Connectors, Cloud Connectors, and Client Connector integrations, as applicable
- Integrate SAML/OIDC identity providers, SSO, and MFA solutions with Zero Trust access services and enforcement policies
- Configure and manage identity groups and attributes used for authentication, authorization, and access-policy enforcement
- Onboard private applications and users while validating authentication, authorization, DNS resolution, TLS connectivity, application ports, and end-to-end application access
- Troubleshoot access denials, App Connector outages, authentication errors, certificate failures, policy conflicts, and application connectivity issues
- Perform root-cause analysis of production access incidents and document identified causes, resolutions, and remediation actions
- Analyze logs and security events to support incident investigation, escalation, and service restoration
- Maintain operational runbooks, configuration baselines, logs, change records, and other supporting documentation
- Participate in change-control activities, production incident response, escalation processes, and on-call support as required
Skills
- 7+ years of experience in network security, Zero Trust Network Access (ZTNA), identity security, or enterprise security operations
- Hands-on knowledge of SAML 2.0, OIDC/OAuth 2.0, SSO, and MFA
- Experience working with enterprise identity platforms such as Microsoft Entra ID or Okta, including identity and authentication troubleshooting
- Strong understanding of TCP/IP, DNS, HTTP/S, TLS, firewalls, routing, and application connectivity
- Experience troubleshooting complex network, identity, authentication, certificate, and application-access issues in production environments
- Experience with SIEM/log analysis, change control, incident escalation, and production service restoration
- Strong production administration and troubleshooting experience with Zscaler ZPA/ZIA preferred; comparable ZTNA experience may be considered when combined with Zscaler expertise
- Zscaler product training and/or certifications
- Experience using PowerShell or Python for administration, automation, or operational support
- Experience working with service APIs and integrations
- Experience supporting access to cloud applications and services
- Experience operating security services across hybrid and multi-cloud environments
- Preferred: Relevant Zscaler product training and/or Zscaler certifications
Benefits
- 401k, health insurance, Paid Time Off, and Life Insurance, customized per role/location
- Remote work
- Growth opportunity within a fast-scaling federal IT firm
- Veteran-friendly (V3) workplace culture
Company Overview