Job description

Varmoda is seeking an experienced Zero Trust Network Access (ZTNA) / Zscaler Security Engineer to operate, support, and continuously improve enterprise Zero Trust access services across hybrid and multi-cloud environments. This role will administer Zscaler ZPA/ZIA services, integrate enterprise identity and MFA solutions, onboard private applications, and troubleshoot complex production access issues involving authentication, security policies, device posture, DNS, TLS, and application connectivity. The ideal candidate brings 7+ years of network security, ZTNA, identity security, or enterprise security operations experience with strong hands-on troubleshooting capabilities. Key Responsibilities • Configure, administer, and support Zscaler ZPA and ZIA, including application segments, access policies, App Connectors, Cloud Connectors, and Client Connector integrations, as applicable. • Integrate SAML/OIDC identity providers, SSO, and MFA solutions with Zero Trust access services and enforcement policies. • Configure and manage identity groups and attributes used for authentication, authorization, and access-policy enforcement. • Onboard private applications and users while validating authentication, authorization, DNS resolution, TLS connectivity, application ports, and end-to-end application access. • Troubleshoot access denials, App Connector outages, authentication errors, certificate failures, policy conflicts, and application connectivity issues. • Perform root-cause analysis of production access incidents and document identified causes, resolutions, and remediation actions. • Analyze logs and security events to support incident investigation, escalation, and service restoration. • Maintain operational runbooks, configuration baselines, logs, change records, and other supporting documentation. • Participate in change-control activities, production incident response, escalation processes, and on-call support as required. Required Qualifications • 7+ years of experience in network security, Zero Trust Network Access (ZTNA), identity security, or enterprise security operations. • Strong production administration and troubleshooting experience with Zscaler ZPA/ZIA preferred; comparable ZTNA experience may be considered when combined with Zscaler expertise. • Hands-on knowledge of SAML 2.0, OIDC/OAuth 2.0, SSO, and MFA. • Experience working with enterprise identity platforms such as Microsoft Entra ID or Okta, including identity and authentication troubleshooting. • Strong understanding of TCP/IP, DNS, HTTP/S, TLS, firewalls, routing, and application connectivity. • Experience troubleshooting complex network, identity, authentication, certificate, and application-access issues in production environments. • Experience with SIEM/log analysis, change control, incident escalation, and production service restoration. Preferred Qualifications • Zscaler product training and/or certifications. • Experience using PowerShell or Python for administration, automation, or operational support. • Experience working with service APIs and integrations. • Experience supporting access to cloud applications and services. • Experience operating security services across hybrid and multi-cloud environments. • Certifications & Clearance • Preferred: Relevant Zscaler product training and/or Zscaler certifications. Recommended Experience: 7+ years About Varmoda Varmoda is a federal IT solutions provider founded in 2020 and headquartered in McLean, Virginia, delivering citizen-centric public services across Financial Assistance, Public Benefits, and Security & Defense domains. Our five-layer architecture — Salesforce (Engagement), Databricks (Data), ServiceNow (Orchestration), Pega (Decisioning), and Oracle HR (Capacity) — puts data at the common thread of every solution we build for federal agencies and the citizens they serve. Varmoda holds CMMI Maturity Level 3, ISO 9001, ISO 20000, and ISO 27001 certifications, and is recognized as a V3 veteran-friendly employer. Why Varmoda • Growth opportunity within a fast-scaling federal IT firm • Direct impact on citizen-facing federal programs • Competitive benefits including 401k, health insurance, Paid Time Off, Life Insurance and others — customize per role/location ( varmoda.com ) • Veteran-friendly (V3) workplace culture

Requirements

Must-haves

Configure, administer, and support Zscaler ZPA and ZIA, including application segments, access policies, App Connectors, Cloud Connectors, and Client Connector integrations, as applicable.
Integrate SAML/OIDC identity providers, SSO, and MFA solutions with Zero Trust access services and enforcement policies.
Configure and manage identity groups and attributes used for authentication, authorization, and access-policy enforcement.
Onboard private applications and users while validating authentication, authorization, DNS resolution, TLS connectivity, application ports, and end-to-end application access.
Troubleshoot access denials, App Connector outages, authentication errors, certificate failures, policy conflicts, and application connectivity issues.
Perform root-cause analysis of production access incidents and document identified causes, resolutions, and remediation actions.
Analyze logs and security events to support incident investigation, escalation, and service restoration.
Maintain operational runbooks, configuration baselines, logs, change records, and other supporting documentation.
Participate in change-control activities, production incident response, escalation processes, and on-call support as required.
7+ years of experience in network security, Zero Trust Network Access (ZTNA), identity security, or enterprise security operations.
Hands-on knowledge of SAML 2.0, OIDC/OAuth 2.0, SSO, and MFA.
Experience working with enterprise identity platforms such as Microsoft Entra ID or Okta, including identity and authentication troubleshooting.
Strong understanding of TCP/IP, DNS, HTTP/S, TLS, firewalls, routing, and application connectivity.
Experience troubleshooting complex network, identity, authentication, certificate, and application-access issues in production environments.
Experience with SIEM/log analysis, change control, incident escalation, and production service restoration.

Nice-to-haves

Strong production administration and troubleshooting experience with Zscaler ZPA/ZIA preferred; comparable ZTNA experience may be considered when combined with Zscaler expertise.
Zscaler product training and/or certifications.
Experience using PowerShell or Python for administration, automation, or operational support.
Experience working with service APIs and integrations.
Experience supporting access to cloud applications and services.
Experience operating security services across hybrid and multi-cloud environments.
Certifications & Clearance
Preferred: Relevant Zscaler product training and/or Zscaler certifications.
Recommended Experience: 7+ years

Application prep

Use the role’s language and application details while tailoring your materials.

Keywords to mirror

python

Platform: jobdiva
Effort: medium

Benefits

Benefits detected in the listing.

Health Insurance

401k

Paid Time Off