We are seeking an experienced Zscaler Engineer to support, maintain, optimize and improve an existing Zscaler implementation for a Government Agency. The ideal candidate will have extensive experience in Zscaler Internet Access (ZIA) and Zscaler Private Access (ZPA), ensuring secure and seamless network connectivity for enterprise environments. Provide ongoing operational support, maintenance, and engineering with regards to the full Zscaler product suite (ZIA, ZPA, ZDX) and related technologies for a currently deployed Zscaler implementation. Configure and tune the system to optimize performance and/or alerting. Leverage expertise and experience to actively troubleshoot complex networking and security issues related to Zscaler. Provide guidance on all aspects of Zscaler network and security capabilities for the customer. Ensure compliance with security standards, policies, and best practices for IT systems and data protection. Collaborate with cross-functional teams to integrate Zscaler with existing network, firewalls, external vendors, and server infrastructure to deliver high-quality technical support. Develop and maintain technical documentation, including network diagrams and security policies. Design, implement, and optimize Zscaler solutions, often as part of a broader SASE/Zero Trust strategy, ensuring alignment with security standards. Configure and fine-tune URL filtering, threat protection, DLP, and SSL inspection policies for diverse user groups (remote, branch). PAC / tunnel / GRE/IPsec onboarding and troubleshooting for sites and laptops. Manage change control / exceptions. Support SSL Inspection, DLP, Firewall, and DNS. Onboarding internal apps (defining app segments, segment groups, server groups). Connector placement, routing, HA design.