Cyber Zscaler Network Security Engineer / Senior Consultant, Strategy, Growth, and Transformation

Experteer Overview In this role you help clients modernize network security through cloud-delivered zero trust architectures, shaping enterprise security with Deloitte’s Cyber team. You will design, deploy, and optimize Zscaler capabilities across complex environments to strengthen security posture and enable secure transformation. You collaborate with cross-functional teams to deliver practical, scalable solutions and guide clients through challenging security transformations. This is a client-facing role that blends technical leadership with strategic advisory, at the intersection of security and digital transformation. Compensation / Benefits * Design, deploy, and manage ZIA and ZPA across client environments * Lead ZTNA transformations, replacing legacy VPNs and modernizing access controls * Configure and optimize Zscaler security features (policy administration, SSL/TLS inspection, DLP, ATP, cloud traffic inspection) * Implement branch, cloud, and application connectors in on-premises and cloud environments (AWS, Azure, GCP) * Develop technical deliverables, designs, and client-facing recommendations tied to security and network transformation Tasks * BA/BS in a technical field * 5+ years in network security engineering * 5+ years hands-on experience with ZIA and ZPA in enterprise environments * 1+ years with Zscaler Branch Connector and Cloud Connector deployments * 3+ years configuring advanced Zscaler security features (CBI, IPS, ATP, DLP) * 3+ years SSL/TLS inspection design and troubleshooting in ZIA * 1+ years Zscaler AI-powered capabilities (ZDX, AI-driven policy) * 3+ years managing Zscaler security policies and RBAC in Admin Portal * Experience with one or more major cloud providers (AWS, GCP, Azure) for ZPA App Connectors * Experience integrating Zscaler with SIEM/SOAR (Splunk, Microsoft Sentinel, XSOAR) * Experience with Zscaler APIs and automation tools (Terraform, Ansible, Python) * Familiarity with identity providers (Okta, Azure AD, Ping Identity) for SAML/SCIM * Willingness to travel up to 50% * ZDTE certification required Key requirements * discretionary annual incentive program * inclusive culture * professional development opportunities * reasonable accommodations for disabilities

role and cloud environments (AWS, Azure, GCP) * Develop technical deliverables, designs, and client-facing recommendations tied to security and network transformation Tasks * BA/BS in a technical field * 5+ years in network security engineering * 5+ years hands-on experience with ZIA and ZPA in enterprise environments * 1+ years with Zscaler Branch Connector and Cloud Connector deployments * 3+ years configuring advanced Zscaler security features (CBI, IPS, ATP, DLP) * 3+ years SSL/TLS inspection design and troubleshooting in ZIA * 1+ years Zscaler AI-powered capabilities (ZDX, AI-driven policy) * 3+ years managing Zscaler security policies and RBAC in Admin Portal * Experience with one or more major cloud providers (AWS, GCP, Azure) for ZPA App Connectors * Experience integrating Zscaler with SIEM/SOAR (Splunk, Microsoft Sentinel, XSOAR) * Experience with Zscaler APIs and automation tools (Terraform, Ansible, Python) * Familiarity with identity providers (Okta, Azure AD, Ping aaaaaaax _ for SAML/SCIM * Willingness to travel up to 50% * ZDTE certification required Key requirements * discretionary annual incentive program * inclusive culture * professional development opportunities * reasonable accommodations for disabilities