Solutions Architect, ZScaler

Agile Defense

. Serve as the primary technical authority for designing, deploying, administering, upgrading, and optimizing enterprise-wide SASE solutions using the Zscaler cloud security platform .

Posted 10/23/2026full-timeAshburn • Virginia • United StatesMid-LevelSenior💰 $170,000 - $185,000 per yearWebsite

Core Competencies

Role fit

Core Competencies

Use this summary to align your resume positioning with the role.

Demonstrates expertise in designing, deploying, and optimizing Zscaler solutions, including ZIA, ZPA, and ZDX, while ensuring robust security policies and operational support. Proficient in troubleshooting complex connectivity and application performance issues across multi-cloud environments.

Highest-signal resume keywords

Zscaler Internet Access (ZIA)Zscaler Private Access (ZPA)Zscaler Digital Experience (ZDX)PowerShell ScriptingTCP/IP Networking

ATS Keywords

Tailor your resume

Applicant Tracking System Keywords

Tip: use these terms in your resume and cover letter to boost ATS matches.

Hard Skills

Zscaler Client Connector (ZCC)Security Policy ConfigurationURL FilteringSSL InspectionTraffic ForwardingApplication Performance MonitoringNetwork Path AnalysisAdvanced TroubleshootingJavaScript PAC FilesNetwork Traffic Analysis

Soft Skills

Problem SolvingIndependent DiagnosisCollaboration

Tools & Technologies

SplunkCriblOktaAWSMicrosoft AzureGitHubDockerVisual StudioVS CodeMobile Device Management

Certifications & Qualifications

Zscaler ZIA Administration CertificationZscaler ZPA Administration CertificationZscaler ZDX TrainingCisco CCNACisco CCNPCompTIA Security+

Industry Keywords

Zero TrustCloud SecurityMulti-Cloud EnvironmentsHybrid Corporate EnvironmentsIncident ResponseChange ControlServiceNowRemote AccessEndpoint CompatibilityAuthentication

Tech Stack

Tools & technologies

AndroidAWSAzureCloudDNSDockerFirewallsiOSJavaScriptMacOSServiceNowSplunkTCP/IP

About the role

Key responsibilities & impact

Serve as the primary technical authority for designing, deploying, administering, upgrading, and optimizing enterprise-wide SASE solutions using the Zscaler cloud security platform
Lead operational architecture across ZIA, ZPA, and ZDX to drive Zero Trust initiatives
Design, implement, and maintain enterprise Zscaler deployments across multi-cloud and hybrid corporate environments
Create, audit, and tune security policies for URL filtering, Cloud Application Control, SSL/TLS deep packet inspection, DLP, and sandboxing
Formulate and execute ZPA access policies enabling least-privilege access to internal applications in private clouds and on-premises data centers
Provide Tier 3/Tier 4 escalation support for proxy routing, PAC file debugging, identity integration, authentication drops, and application latency issues
Manage Zscaler Client Connector distribution, health checks, profile tuning, and upgrades across macOS, Windows, iOS, and Android
Use ZDX and cloud analytics to isolate endpoint, ISP, and application-level user experience degradation
Configure automated alerting and SIEM log integration with Splunk and Cribl
Partner with IAM teams to configure SAML/SCIM attributes with Okta, Microsoft Entra ID, and Ping Identity
Provide Tier 2/Tier 3 escalation support for outages, circuit degradation, and performance issues; conduct RCAs and coordinate vendor support
Maintain network diagrams, topology maps, inventory databases, SOPs, and ServiceNow/Remedy change-control tickets
Participate in 24/7/365 on-call support and coordinate critical incident escalations within SLA limits
Implement Emergency Change Requests, Emergency Break Fixes, or Change Requests when needed to restore services
Participate in RCA and post-incident analysis for mission-critical applications and enterprise IT infrastructure
Partner with program and project managers on engineering deliverables, milestones, and resource planning

Requirements

What you’ll need

Minimum of 5+ years of relevant experience
Strong hands-on experience with Zscaler Internet Access (ZIA), including security policies, URL filtering, SSL inspection, traffic forwarding, authentication, and advanced troubleshooting
Strong hands-on experience with Zscaler Private Access (ZPA), including App Connectors, application segments, access policies, private application connectivity, and troubleshooting
Strong hands-on experience with Zscaler Client Connector (ZCC), including deployment, configuration, forwarding profiles, upgrades, endpoint compatibility, and troubleshooting
Strong hands-on experience with Zscaler Digital Experience (ZDX), including application performance monitoring, network path analysis, latency investigation, and troubleshooting
Advanced knowledge of JavaScript-based PAC files, proxy configurations, routing logic, and application-specific bypass requirements
PowerShell scripting and automation for troubleshooting and operational support
Strong knowledge of TCP/IP, DNS, routing, firewalls, VPNs, TLS/SSL, proxy architecture, and network traffic analysis
Ability to independently diagnose complex connectivity, authentication, application performance, and security policy issues
Zscaler ZIA administration certification or equivalent official training
Zscaler ZPA administration certification or equivalent official training
Zscaler ZDX training or relevant certification, where available
Cisco CCNA or CCNP
CompTIA Security+
Relevant Zscaler Zero Trust or advanced security training
Must be able to pass a CBP BI
Ability to travel within the United States up to 20% of the time
Familiarity with Splunk, Cribl, CrowdStrike, Okta, AWS, Microsoft Azure, GitHub, Docker, Git, Visual Studio, VS Code, APIs, mobile technologies, wireless connectivity, VPN interactions, mobile device management solutions, ZSIM, WCTTV camera systems, and drone technologies is highly desirable

Benefits

Comp & perks

24/7/365 on-call rotation readiness
Scheduled and ad hoc travel up to 20% of the time