Senior Zscaler Administrator

Title:

KBR is seeking a Senior Zscaler Administrator to join our global cybersecurity and secure access team. This senior-level engineering role combines Zero Trust architecture secure access administration cloud security endpoint integration automation and operational excellence across complex enterprise environments. You will play a key role in supporting and enhancing enterprise secure access services across Zscaler Internet Access (ZIA) Zscaler Private Access (ZPA) Zscaler Digital Experience (ZDX) and Zscaler Client Connector (ZCC) helping to strengthen security controls while enabling a modern distributed workforce.

Partnering closely with cybersecurity networking identity endpoint cloud infrastructure and service delivery teams you will design implement and support secure access solutions that improve user experience reduce operational risk and advance KBRs Zero Trust and SASE capabilities. The ideal candidate brings deep expertise across Zscaler technologies enterprise networking identity integrations and secure access platforms with a proven ability to support large-scale highly regulated environments.

This is a permanent full-time position based in the United Kingdom. Due to the nature of the work and customer requirements candidates must be eligible to obtain and maintain the appropriate UK Security Clearance.

In September 2025 KBR announced that we are spinning our Mission Technology Solutions business into a separate public company. This role will ultimately be part of the new company. The Mission Technology Solutions business partners with governments and defense intelligence space aviation and critical infrastructure customers to deliver high-end engineering science technology and mission support solutions.

Key Responsibilities

• Administer support and enhance Zscaler Internet Access (ZIA) Zscaler Private Access (ZPA) Zscaler Digital Experience (ZDX) and Zscaler Client Connector (ZCC) environments.
• Configure and maintain access policies forwarding profiles application segments connector groups URL filtering SSL inspection cloud firewall controls and data protection policies.
• Monitor platform health user experience security events application access performance metrics and operational trends across the Zscaler ecosystem.
• Troubleshoot complex client connectivity authentication application access policy enforcement and cloud security issues independently.
• Support deployment lifecycle management upgrades remediation and troubleshooting of Zscaler Client Connector across Windows macOS iOS and Android devices.
• Partner with endpoint management teams to deploy and maintain Zscaler Client Connector using Microsoft Intune Windows Autopilot Jamf and similar endpoint management platforms.
• Support integrations with Microsoft Entra ID Active Directory Conditional Access Single Sign-On (SSO) Multifactor Authentication (MFA) and related identity services.
• Deploy validate and maintain ZPA App Connectors across on-premises cloud hybrid and segmented network environments.
• Participate in incident problem change and vulnerability management processes within enterprise CAB-controlled environments.
• Develop automation scripts reporting and operational tooling to support compliance validation health monitoring troubleshooting and remediation activities.
• Create and maintain technical documentation operational standards implementation guides support runbooks and knowledge transfer materials.
• Collaborate with cybersecurity networking endpoint cloud infrastructure and service management teams to improve secure access capabilities and operational maturity.
• Support strategic initiatives including Zero Trust transformation SASE adoption VPN modernization tenant migrations divestitures and enterprise technology transformation programmes.
• Drive continuous improvement initiatives focused on automation service reliability operational efficiency and user experience.

Basic Qualifications

Education & Experience

• Bachelors degree in Cybersecurity Information Technology Computer Science Engineering Information Systems or a related discipline; or an equivalent combination of education technical training certifications and relevant experience.
• 7 years of experience supporting enterprise cybersecurity networking secure access or cloud security environments.
• Hands-on experience administering Zscaler Internet Access (ZIA) and Zscaler Private Access (ZPA) within complex enterprise organisations.
• Experience supporting secure remote access cloud security platforms application connectivity and Zero Trust security initiatives.
• Experience working within large-scale highly regulated environments.
• Eligibility to obtain and maintain the appropriate UK Security Clearance.

Skills & Competencies

• Deep expertise administering Zscaler Internet Access (ZIA) Zscaler Private Access (ZPA) Zscaler Digital Experience (ZDX) and Zscaler Client Connector (ZCC).
• Strong knowledge of Zero Trust Network Access (ZTNA) Secure Access Service Edge (SASE) and modern secure access architectures.
• Experience managing access policies forwarding profiles application segments connector groups URL filtering SSL inspection cloud firewall controls and data protection capabilities.
• Strong understanding of TCP/IP DNS routing VPN technologies proxies firewall technologies and secure web gateway concepts.
• Experience troubleshooting SSL/TLS inspection certificate services authentication flows identity integrations and SSO technologies.
• Knowledge of segmentation least-privilege access models security policy enforcement and access governance principles.
• Experience supporting Microsoft Entra ID Active Directory Conditional Access MFA and hybrid identity environments.
• Familiarity with Microsoft Intune endpoint compliance frameworks and modern endpoint management practices.
• Strong PowerShell scripting and automation skills.
• Experience with log analysis packet capture interpretation root-cause analysis and structured troubleshooting methodologies.
• Excellent communication documentation stakeholder management and technical problem-solving capabilities.

Preferred Qualifications

• Experience supporting Microsoft Defender for Endpoint Microsoft 365 Security and integrated Microsoft security platforms.
• Knowledge of Microsoft Azure administration cloud networking and hybrid cloud infrastructure.
• Experience with SIEM integrations log analytics reporting platforms dashboarding and security monitoring solutions.
• Experience with Bash scripting automation tools and infrastructure operations.
• Experience supporting government defence aerospace critical infrastructure energy transportation or other highly regulated sectors.
• Familiarity with UK government security frameworks Cyber Essentials Plus NCSC guidance ISO 27001 NIST frameworks and other relevant security and compliance standards.
• Experience supporting secure access transformations VPN replacement initiatives mergers acquisitions divestitures tenant migrations or large-scale enterprise modernisation programmes.

Preferred Certifications

• Zscaler Certified Cloud Administrator (ZCCA) or equivalent Zscaler administrator certification
• Zscaler Certified Cloud Professional (ZCCP) or specialised ZIA/ZPA certifications.
• Microsoft security identity endpoint or Azure certifications.
• CompTIA Security CISSP CISM CCSP or equivalent cybersecurity certifications.
• Microsoft Certified: Cybersecurity Architect Expert Azure Administrator Associate or other relevant cloud security certifications.