Senior Zscaler Administrator

Job description

Title: Senior Zscaler Administrator KBR is seeking a Senior Zscaler Administrator to join our global cybersecurity and secure access team. This senior-level engineering role combines Zero Trust architecture, secure access administration, cloud security, endpoint integration, automation, and operational excellence across complex enterprise environments. You will play a key role in supporting and enhancing enterprise secure access services across Zscaler Internet Access (ZIA), Zscaler Private Access (ZPA), Zscaler Digital Experience (ZDX), and Zscaler Client Connector (ZCC), helping to strengthen security controls while enabling a modern, distributed workforce. Partnering closely with cybersecurity, networking, identity, endpoint, cloud, infrastructure, and service delivery teams, you will design, implement, and support secure access solutions that improve user experience, reduce operational risk, and advance KBR's Zero Trust and SASE capabilities. The ideal candidate brings deep expertise across Zscaler technologies, enterprise networking, identity integrations, and secure access platforms, with a proven ability to support large-scale, highly regulated environments. This is a permanent, full-time position based in the United Kingdom. Due to the nature of the work and customer requirements, candidates must be eligible to obtain and maintain the appropriate UK Security Clearance. In September 2025, KBR announced that we are spinning our Mission Technology Solutions business into a separate public company. This role will ultimately be part of the new company. The Mission Technology Solutions business partners with governments and defense, intelligence, space, aviation, and critical infrastructure customers to deliver high-end engineering, science, technology, and mission support solutions. Key Responsibilities Administer, support, and enhance Zscaler Internet Access (ZIA), Zscaler Private Access (ZPA), Zscaler Digital Experience (ZDX), and Zscaler Client Connector (ZCC) environments. Configure and maintain access policies, forwarding profiles, application segments, connector groups, URL filtering, SSL inspection, cloud firewall controls, and data protection policies. Monitor platform health, user experience, security events, application access, performance metrics, and operational trends across the Zscaler ecosystem. Troubleshoot complex client connectivity, authentication, application access, policy enforcement, and cloud security issues independently. Support deployment, lifecycle management, upgrades, remediation, and troubleshooting of Zscaler Client Connector across Windows, macOS, iOS, and Android devices. Partner with endpoint management teams to deploy and maintain Zscaler Client Connector using Microsoft Intune, Windows Autopilot, Jamf, and similar endpoint management platforms. Support integrations with Microsoft Entra ID, Active Directory, Conditional Access, Single Sign-On (SSO), Multifactor Authentication (MFA), and related identity services. Deploy, validate, and maintain ZPA App Connectors across on-premises, cloud, hybrid, and segmented network environments. Participate in incident, problem, change, and vulnerability management processes within enterprise CAB-controlled environments. Develop automation, scripts, reporting, and operational tooling to support compliance validation, health monitoring, troubleshooting, and remediation activities. Create and maintain technical documentation, operational standards, implementation guides, support runbooks, and knowledge transfer materials. Collaborate with cybersecurity, networking, endpoint, cloud, infrastructure, and service management teams to improve secure access capabilities and operational maturity. Support strategic initiatives including Zero Trust transformation, SASE adoption, VPN modernization, tenant migrations, divestitures, and enterprise technology transformation programmes. Drive continuous improvement initiatives focused on automation, service reliability, operational efficiency, and user experience. Basic Qualifications Education & Experience Bachelor's degree in Cybersecurity, Information Technology, Computer Science, Engineering, Information Systems, or a related discipline; or an equivalent combination of education, technical training, certifications, and relevant experience. 7+ years of experience supporting enterprise cybersecurity, networking, secure access, or cloud security environments. Hands-on experience administering Zscaler Internet Access (ZIA) and Zscaler Private Access (ZPA) within complex enterprise organisations. Experience supporting secure remote access, cloud security platforms, application connectivity, and Zero Trust security initiatives. Experience working within large-scale, highly regulated environments. Eligibility to obtain and maintain the appropriate UK Security Clearance. Skills & Competencies Deep expertise administering Zscaler Internet Access (ZIA), Zscaler Private Access (ZPA), Zscaler Digital Experience (ZDX), and Zscaler Client Connector (ZCC). Strong knowledge of Zero Trust Network Access (ZTNA), Secure Access Service Edge (SASE), and modern secure access architectures. Experience managing access policies, forwarding profiles, application segments, connector groups, URL filtering, SSL inspection, cloud firewall controls, and data protection capabilities. Strong understanding of TCP/IP, DNS, routing, VPN technologies, proxies, firewall technologies, and secure web gateway concepts. Experience troubleshooting SSL/TLS inspection, certificate services, authentication flows, identity integrations, and SSO technologies. Knowledge of segmentation, least-privilege access models, security policy enforcement, and access governance principles. Experience supporting Microsoft Entra ID, Active Directory, Conditional Access, MFA, and hybrid identity environments. Familiarity with Microsoft Intune, endpoint compliance frameworks, and modern endpoint management practices. Strong PowerShell scripting and automation skills. Experience with log analysis, packet capture interpretation, root-cause analysis, and structured troubleshooting methodologies. Excellent communication, documentation, stakeholder management, and technical problem-solving capabilities. Preferred Qualifications Experience supporting Microsoft Defender for Endpoint, Microsoft 365 Security, and integrated Microsoft security platforms. Knowledge of Microsoft Azure administration, cloud networking, and hybrid cloud infrastructure. Experience with SIEM integrations, log analytics, reporting platforms, dashboarding, and security monitoring solutions. Experience with Bash scripting, automation tools, and infrastructure operations. Experience supporting government, defence, aerospace, critical infrastructure, energy, transportation, or other highly regulated sectors. Familiarity with UK government security frameworks, Cyber Essentials Plus, NCSC guidance, ISO 27001, NIST frameworks, and other relevant security and compliance standards. Experience supporting secure access transformations, VPN replacement initiatives, mergers, acquisitions, divestitures, tenant migrations, or large-scale enterprise modernisation programmes. Preferred Certifications Zscaler Certified Cloud Administrator (ZCCA) or equivalent Zscaler administrator certification Zscaler Certified Cloud Professional (ZCCP) or specialised ZIA/ZPA certifications. Microsoft security, identity, endpoint, or Azure certifications. CompTIA Security+, CISSP, CISM, CCSP, or equivalent cybersecurity certifications. Microsoft Certified: Cybersecurity Architect Expert, Azure Administrator Associate, or other relevant cloud security certifications.