Security Engineer - Zscaler

In this role you will design, implement and operate Zero Trust and cloud security controls to safeguard a manufacturing environment. You will work with cross-functional teams to balance security, availability and performance across staff, contractors, plants and remote sites. You will lead Zscaler deployments and incident response, shaping secure access patterns and compliance alignment. This position offers a meaningful impact on protecting critical operations and advancing secure digital infrastructure.

• Design, deploy and administer ZIA and ZPA with policies, forwarding, PAC files and client configuration
• Implement secure access patterns with segmentation and least-privilege
• Integrate Zscaler with identity providers, MFA and directory services
• Monitor and respond to security events using SIEM/SOAR; triage incidents
• Develop and maintain security baselines, standards and runbooks
• Collaborate with network, infrastructure and OT/plant teams to balance security, availability and performance
• Conduct risk assessments, vulnerability management and remediation tracking
• Support audits and compliance activities (ISO 27001, NIST-aligned) with evidence gathering

• Proven experience delivering Zscaler (ZIA/ZPA; ZDX/Cloud Firewall desirable)
• Strong networking fundamentals (DNS, TCP/IP, TLS, proxies, VPN, routing, firewall)
• Experience with secure web gateway policies, CASB/DLP and data protection controls
• Hands-on log analysis, SIEM tooling and incident response processes
• Knowledge of Windows/macOS deployment and endpoint security (mobile desirable)
• Ability to automate scripts (PowerShell, Python) and work with APIs
• Familiarity with Azure/AWS cloud platforms and modern IAM
• Experience in regulated or high-availability environments; manufacturing/OT security exposure is beneficial
• Strong communication skills to explain risk and controls to technical and non-technical stakeholders
• Fluent English; additional European languages advantageous

• strong communication
• collaboration
• risk-aware decision making
• Zscaler ZIA
• Zscaler ZPA
• ZDX/Cloud Firewall (desirable)