Cyber Zscaler Network Security Engineer / Senior Consultant, Strategy, Growth, and Transformation

Experteer Overview In this role you help modernize enterprise networks through cloud-delivered zero trust architectures, focusing on Zscaler deployments across on-premises and cloud environments. You’ll design and optimize ZIA/ZPA, support ZTNA transformations, and guide secure transformations alongside client teams. The engagement blends technical delivery with advisory work to strengthen security posture and improve user experiences. This is a hands-on, client-facing position that shapes large-scale security programs within Deloitte’s Cyber Enterprise Security team. Compensation / Benefits * Design, deploy, and manage Zscaler Internet Access (ZIA) and Zscaler Private Access (ZPA) across enterprise environments * Support zero trust transformations, replacing legacy VPNs and modernizing access controls * Configure and optimize Zscaler security features (policy administration, SSL/TLS inspection, ATP, DLP, cloud-based traffic inspection) * Implement branch, cloud, and application connectors in AWS, Azure, and GCP environments * Develop technical deliverables, solution designs, and client-facing recommendations aligned to security and network transformation Tasks * BA/BS in a technical field * ZDTE certification * 5+ years in network security engineering * 5+ years designing, deploying, and managing ZIA and ZPA in enterprise-scale environments * 1+ years with Zscaler Branch Connector and Zscaler Cloud Connector in cloud deployments * 3+ years configuring Zscaler security features (DLP, ATP, IPS, CBI) * 1+ years with Zscaler AI-powered capabilities and ZDX * 3+ years defining and managing Zscaler security policies and RBAC * Experience with one or more major cloud providers (AWS, GCP, Azure) for ZPA App Connectors * Experience integrating Zscaler with SIEM/SOAR (e.g., Splunk, Microsoft Sentinel, XSOAR) * Experience with APIs and automation tools (Terraform, Ansible, Python) * Experience with identity providers for SAML/SCIM (Okta, Azure AD, Ping Identity) * Ability to travel up to 50% * Experience presenting architectures to both technical and executive stakeholders Key requirements *

This in AWS, Azure, and GCP environments * Develop technical deliverables, solution designs, and client-facing recommendations aligned to security and network transformation Tasks * BA/BS in a technical field * ZDTE certification * 5+ years in network security engineering * 5+ years designing, deploying, and managing ZIA and ZPA in enterprise-scale environments * 1+ years with Zscaler Branch Connector and Zscaler Cloud Connector in cloud deployments * 3+ years configuring Zscaler security features (DLP, ATP, IPS, CBI) * 1+ years with Zscaler AI-powered capabilities and ZDX * 3+ years defining and managing Zscaler security policies and RBAC * Experience with one or more major cloud providers (AWS, GCP, Azure) for ZPA App Connectors * Experience integrating Zscaler with SIEM/SOAR (e.g., Splunk, Microsoft Sentinel, XSOAR) * Experience with APIs and automation tools (Terraform, Ansible, Python) * Experience with identity providers for SAML/SCIM (Okta, Azure AD, Ping Identity) * Ability to travel up to 50% * Experience presenting architectures to both technical and executive stakeholders Key requirements *