Sr. Cybersecurity Engineer

Overview

Cybersecurity at Providence is responsible for appropriately protecting information related to caregivers and affiliates, as well as safeguarding confidential business and patient information.

The Zscaler Engineer plays a key role in strengthening Providence’s security posture by supporting and optimizing Zscaler security platforms used across the enterprise. This role will collaborate with Cybersecurity, Networking, and Cloud teams to ensure secure web access, application protection, and alignment with Providence’s Zero Trust principles.

What Will You Be Responsible For?

• Support, administer, and optimize Zscaler Internet Access (ZIA) and Zscaler Private Access (ZPA) platforms.
• Manage traffic‑forwarding methods including Zscaler Client Connector (ZCC), PAC files, GRE/IPsec tunnels, and identity/authentication integrations.
• Configure and enhance SSL inspection, threat protection, DLP, and access‑control policies.
• Maintain platform compliance by managing updates, patches, and vulnerability remediation in coordination with Zscaler Support.
• Develop and maintain runbooks, technical documentation, workflow diagrams, and architecture references.
• Troubleshoot complex Zscaler, connectivity, and application‑security issues across hybrid and cloud environments.
  
  
  

• Partner with Cybersecurity, Networking, and Cloud teams to implement secure designs and validate Zscaler deployments.
• Perform configuration reviews, policy tuning, and continuous optimization of ZIA/ZPA services.
• Participate in Proof‑of‑Concept (POC) evaluations and assist in onboarding new features or Zscaler capabilities.
• Document system standards, reference architectures, and operational procedures for Zscaler technologies.
• Stay updated on emerging technologies (Zero Trust, SASE, cloud security patterns) and incorporate them into platform improvements.
  
  
  

• 3–5+ years of experience in network security, cloud security, or Zero Trust engineering.
• Hands‑on experience with Zscaler ZIA/ZPA, ZCC agent, and GRE/IPsec tunnels.
• Strong knowledge of DLP concepts, CASB technologies, and SaaS Security Posture Management.
• Understanding of SASE architecture, network protocols, SSL/TLS inspection, and authentication flows.
• Familiarity with Azure, AWS, or GCP security controls.
• Strong analytical and troubleshooting skills.
• Ability to collaborate across Cybersecurity, Network, and Cloud engineering teams.
• Preferred certifications: Zscaler (ZIA/ZPA), CCNP Security, CISSP, or equivalent.