> Markdown version of [/jobs/ext/575133-zscaler-managing-engineer](https://www.wearedevelopers.com/jobs/ext/575133-zscaler-managing-engineer). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md). --- # Zscaler Managing Engineer - **Company:** Excelgens, Inc - **Location:** United States (Remote available) - **Salary:** $145,600.0 - $166,400.0 - **Contract:** Temporary to permanent - **Skills:** Microsoft Windows, Access Network, Active Directory, Amazon Web Services, Apple Mac Systems, Microsoft Azure, Internet Protocol Security (IP SEC), Virtual Private Networks (VPN), Network Segmentation, OpenID, Azure Active Directory, Zero Trust Network Access, Security Assertion Markup Language (SAML), Systems Integration, Wide Area Networks, Transport Layer Security, Okta, HybridCloud, Microsoft InTune, Azure Security Center, Pingfederate - **Published:** June 21, 2026 - **Apply:** https://www.indeed.com/viewjob?jk=fc67e7247809986b ## About the Role Do you have experience in macOS?, Zscaler ZDTA or ZDTE certifications preferred, * Zscaler: 4 years (Required) * ZDTA: 1 year (Required) * ZDTE: 1 year (Required) ## Description Architecture & Design Designed and deployed enterprise-scale Zscaler (ZIA, ZPA, ZDX) and SASE architectures supporting tens of thousands of users across globally distributed sites, including SD-WAN integration, regional cloud egress, GRE/IPsec tunneling, and site-survivability patterns aligned to a Zero Trust enforcement model. Identity & Zero Trust Integration Integrated Zscaler with enterprise identity providers (Entra ID/Azure AD, Okta, Active Directory, PingFederate) using SAML/OIDC/SCIM to enable conditional access, MFA, device posture checks, and risk-based policy enforcement - operationalizing Zero Trust across user-to-app and app-to-app flows. ZPA & Application Segmentation Led ZPA application discovery, segmentation, and least-privilege access design for hundreds of internal applications, eliminating legacy VPN dependencies, reducing the attack surface, and replacing flat network access with identity- and posture-aware micro-segmentation across hybrid cloud (AWS, Azure) and on-prem workloads. Endpoint & Policy Engineering Engineered Zscaler Client Connector (ZCC) deployment and policy baselines at scale (Windows, macOS, mobile), integrating with Microsoft Defender for Endpoint, Intune, and EDR/XDR telemetry to unify endpoint posture, SSL inspection, DLP, and CASB controls into a single enforcement plane. ## Related Videos - [Security Pitfalls for Software Engineers](https://www.wearedevelopers.com/videos/726-security-pitfalls-for-software-engineers) - [Keeping applications secure by evolving OAuth 2.0 and OpenID Connect](https://www.wearedevelopers.com/videos/100152-keeping-applications-secure-by-evolving-oauth-2-0-and-openid-connect) - [The Developer Workstation Blind Spot: Why Your Security Stack Can't See What Matters Most](https://www.wearedevelopers.com/videos/100254-the-developer-workstation-blind-spot-why-your-security-stack-can-t-see-what-matters-most) - [Delegating the chores of authenticating users to Keycloak](https://www.wearedevelopers.com/videos/1558-delegating-the-chores-of-authenticating-users-to-keycloak) - [You can’t hack what you can’t see](https://www.wearedevelopers.com/videos/41-you-can-t-hack-what-you-can-t-see) - [Get started with securing your cloud-native Java microservices applications](https://www.wearedevelopers.com/videos/123-get-started-with-securing-your-cloud-native-java-microservices-applications) ## Related Articles - [Dev Digest 191: Malware interviews, EU ❤️ Open Source and Skilled Agents](https://www.wearedevelopers.com/magazine/645-dev-digest-191-malware-interviews-eu-open-source-and-skilled-agents) - [What Are The Top Skills Required For Azure Developers?](https://www.wearedevelopers.com/magazine/77-what-are-the-top-skills-required-for-azure-developers) - [Dev Digest 134 - Where pixels sing?](https://www.wearedevelopers.com/magazine/477-dev-digest-134-where-pixels-sing) - [Events like RSAC Get You CISOs. Developers Decide What Actually Gets Deployed.](https://www.wearedevelopers.com/magazine/693-events-like-rsac-get-you-cisos-developers-decide-what-actually-gets-deployed) - [Dev Digest 187: Build Agents, pick MCPs and prove you're not a robot!](https://www.wearedevelopers.com/magazine/633-dev-digest-187-build-agents-pick-mcps-and-prove-you-re-not-a-robot) - [Dev Digest 176: Expensive Agents, Taking Over VSCode and Safer Vibe Coding](https://www.wearedevelopers.com/magazine/603-dev-digest-176-expensive-agents-taking-over-vscode-and-safer-vibe-coding)