Senior Zscaler Administrator

Salary: £48,000 - 88,000 per year

Requirements:

• Bachelors degree in Cybersecurity, Information Technology, Computer Science, Engineering, Information Systems, or a related discipline; or an equivalent combination of education, technical training, certifications, and relevant experience.
• 7+ years of experience supporting enterprise cybersecurity, networking, secure access, or cloud security environments.
• Hands-on experience administering Zscaler Internet Access (ZIA) and Zscaler Private Access (ZPA) within complex enterprise organisations.
• Experience supporting secure remote access, cloud security platforms, application connectivity, and Zero Trust security initiatives.
• Experience working within large-scale, highly regulated environments.
• Eligibility to obtain and maintain the appropriate UK Security Clearance.
• Deep expertise administering Zscaler Internet Access (ZIA), Zscaler Private Access (ZPA), Zscaler Digital Experience (ZDX), and Zscaler Client Connector (ZCC).
• Strong knowledge of Zero Trust Network Access (ZTNA), Secure Access Service Edge (SASE), and modern secure access architectures.
• Experience managing access policies, forwarding profiles, application segments, connector groups, URL filtering, SSL inspection, cloud firewall controls, and data protection capabilities.
• Strong understanding of TCP/IP, DNS, routing, VPN technologies, proxies, firewall technologies, and secure web gateway concepts.
• Experience troubleshooting SSL/TLS inspection, certificate services, authentication flows, identity integrations, and SSO technologies.
• Knowledge of segmentation, least-privilege access models, security policy enforcement, and access governance principles.
• Experience supporting Microsoft Entra ID, Active Directory, Conditional Access, MFA, and hybrid identity environments.
• Familiarity with Microsoft Intune, endpoint compliance frameworks, and modern endpoint management practices.
• Strong PowerShell scripting and automation skills.
• Experience with log analysis, packet capture interpretation, root-cause analysis, and structured troubleshooting methodologies.
• Excellent communication, documentation, stakeholder management, and technical problem-solving capabilities.
• Experience supporting Microsoft Defender for Endpoint, Microsoft 365 Security, and integrated Microsoft security platforms.
• Knowledge of Microsoft Azure administration, cloud networking, and hybrid cloud infrastructure.
• Experience with SIEM integrations, log analytics, reporting platforms, dashboarding, and security monitoring solutions.
• Experience with Bash scripting, automation tools, and infrastructure operations.
• Experience supporting government, defence, aerospace, critical infrastructure, energy, transportation, or other highly regulated sectors.
• Familiarity with UK government security frameworks, Cyber Essentials Plus, NCSC guidance, ISO 27001, NIST frameworks, and other relevant security and compliance standards.
• Experience supporting secure access transformations, VPN replacement initiatives, mergers, acquisitions, divestitures, tenant migrations, or large-scale enterprise modernisation programmes.
• Zscaler Certified Cloud Administrator (ZCCA) or equivalent Zscaler administrator certification.
• Zscaler Certified Cloud Professional (ZCCP) or specialised ZIA/ZPA certifications.
• Microsoft security, identity, endpoint, or Azure certifications.
• CompTIA Security+, CISSP, CISM, CCSP, or equivalent cybersecurity certifications.
• Microsoft Certified: Cybersecurity Architect Expert, Azure Administrator Associate, or other relevant cloud security certifications.

Responsibilities:

• Administer, support, and enhance Zscaler Internet Access (ZIA), Zscaler Private Access (ZPA), Zscaler Digital Experience (ZDX), and Zscaler Client Connector (ZCC) environments.
• Configure and maintain access policies, forwarding profiles, application segments, connector groups, URL filtering, SSL inspection, cloud firewall controls, and data protection policies.
• Monitor platform health, user experience, security events, application access, performance metrics, and operational trends across the Zscaler ecosystem.
• Troubleshoot complex client connectivity, authentication, application access, policy enforcement, and cloud security issues independently.
• Support deployment, lifecycle management, upgrades, remediation, and troubleshooting of Zscaler Client Connector across Windows, macOS, iOS, and Android devices.
• Partner with endpoint management teams to deploy and maintain Zscaler Client Connector using Microsoft Intune, Windows Autopilot, Jamf, and similar endpoint management platforms.
• Support integrations with Microsoft Entra ID, Active Directory, Conditional Access, Single Sign-On (SSO), Multifactor Authentication (MFA), and related identity services.
• Deploy, validate, and maintain ZPA App Connectors across on-premises, cloud, hybrid, and segmented network environments.
• Participate in incident, problem, change, and vulnerability management processes within enterprise CAB-controlled environments.
• Develop automation, scripts, reporting, and operational tooling to support compliance validation, health monitoring, troubleshooting, and remediation activities.
• Create and maintain technical documentation, operational standards, implementation guides, support runbooks, and knowledge transfer materials.
• Collaborate with cybersecurity, networking, endpoint, cloud, infrastructure, and service management teams to improve secure access capabilities and operational maturity.
• Support strategic initiatives including Zero Trust transformation, SASE adoption, VPN modernisation, tenant migrations, divestitures, and enterprise technology transformation programmes.
• Drive continuous improvement initiatives focused on automation, service reliability, operational efficiency, and user experience.

Technologies:

• Active Directory
• Android
• Architect
• Azure
• Bash
• Cloud
• Firewall
• Support
• macOS
• Microsoft 365
• Microsoft Intune
• Network
• PowerShell
• Security
• TCP/IP
• VPN
• Web
• Windows
• iOS
• Office 365
• DevOps

More:

We are KBR, and we are seeking a Senior Zscaler Administrator to join our global cybersecurity and secure access team. This permanent, full-time role is based in Leatherhead, Surrey, United Kingdom, and supports our Mission Technology Solutions business as it transitions into a separate public company. We work across government, defence, intelligence, space, aviation, and critical infrastructure sectors, delivering high-end engineering, science, technology, and mission support solutions. This senior-level role focuses on Zero Trust architecture, secure access administration, cloud security, endpoint integration, automation, and operational excellence in a complex enterprise environment.

last updated 34 week of 2026