RWE Supply & Trading GmbH
To start as soon as possible, full time, permanent
Department Insights
As a Senior Zscaler Engineer, you will play a key role in shaping and operating a future-proof network for RWE across more than 250 locations worldwide. You will leverage your expertise to implement and continuously evolve the company-specific network architecture and strategy, ensuring alignment with the Group’s strategic objectives in close collaboration with internal stakeholders and external partners.
You will join the Connectivity & Network Peripherals department – a dynamic and highly skilled team responsible for the end-to-end network and network security landscape, including 2nd and 3rd level support. Beyond day-to-day operations, the team plays a crucial role in driving forward-looking projects, enabling new business capabilities, and continuously improving the overall infrastructure across the Group.
This position offers you a high level of ownership, the opportunity to work with cutting-edge technologies like Zscaler, and the chance to make a visible impact in a complex, international environment.
Overview
We are seeking an experienced Zscaler Engineer to design, implement, and support our enterprise Zero Trust security posture using the Zscaler platform (ZIA, ZPA, ZDX). The ideal candidate will have strong knowledge of clouddelivered security services, identityintegrated policy enforcement, and networking fundamentals. This role will work closely with Security, Networking, EUC, and Architecture teams to ensure secure, highperformance access for users, devices, and workloads.
Key Responsibilities
Platform Administration
1. Administer, maintain, and optimize Zscaler Internet Access (ZIA) and Zscaler Private Access (ZPA) tenant environments.
2. Create, update, and validate security policies, URL filtering, SSL inspection rules, access rules, and zero trust application segmentation.
3. Manage and maintain authentication integrations (IdP, SAML, SCIM, SSO, user provisioning).
Zero Trust Architecture & Design
4. Contribute to Zero Trust strategies leveraging Zscaler Zero Trust Exchange.
5. Assist with designing secure access paths for internal/private applications using ZPA App Connectors and Segment Groups.
6. Support microsegmentation design and application mapping.
Deployment & Configuration
7. Deploy Zscaler Client Connector (ZCC) across endpoints; manage upgrade cadence and posture rules.
8. Integrate Zscaler with identity providers (Azure AD / Okta), SIEM, EDR/XDR, and firewall platforms.
9. Work with network teams to ensure proper GRE/IPSec tunneling or PAC file configurations.
Monitoring, Troubleshooting & Support
10. Use Zscaler logs, NSS feeds, and ZDX for diagnostics and performance troubleshooting.
11. Provide 3rdline support for connectivity, policy, and application issues.
12. Engage Zscaler Support when required and track case progress through resolution.
Governance & Security Management
13. Ensure alignment with internal security frameworks and compliance requirements.
14. Produce documentation, runbooks, architectural diagrams, and operational guidelines.
15. Assist with audits, risk assessments, and policy reviews.
Continuous Improvement
16. Monitor new features, releases, and best practice advisories from Zscaler.
17. Drive capability enhancements, automation, and platform optimization.
18. Support user experience improvements through ZDX insights and reporting.
Required Skills & Experience
Technical
19. Strong experience with ZIA, ZPA, and ZCC administration.
20. Solid understanding of Zero Trust Network Access (ZTNA) principles.
21. Deep knowledge of routing, TCP/IP, DNS, VPNs, proxies, TLS/SSL, and authentication flows.
22. Experience with Azure AD/Entra ID, Okta, or similar identity platforms.
23. Familiarity with SIEM integrations, log forwarding, and security monitoring.
24. Understanding of SDWAN integrations and networktocloud routing.
Professional
25. Strong analytical, troubleshooting, and problemsolving skills.
26. Ability to communicate complex technical topics to both technical and nontechnical audiences.
27. Experience working in enterprise environments with change control and security governance.
Preferred
28. Zscaler Certifications, such as:
29. ZDTA – Zscaler Digital Transformation Administrator
30. ZDTE – Zscaler Digital Transformation Engineer
31. ZDXA – Zscaler Digital Experience Administrator
32. Experience with automation (PowerShell, Python, Terraform).
33. Knowledge of cloud platforms (Azure, AWS, GCP).
Education & Background
34. Degree in Computer Science, Cybersecurity, Networking, or equivalent experience.
35. 3–7 years experience in network security, cloud security, or endpoint security.
Our offer
36. A highly motivated dynamic team with a "you" mentality and fun at work
37. Modern company campus with several company restaurants and coffee bars with free fruit and drinks
38. Ample employee parking through our own parking garages on campus
39. Flexible working in the office and remotely (hybrid model)
40. Attractive remuneration with annual discretionary bonus plus additional benefits such as employer-funded company pension scheme and employee discounts
41. Extensive health management with own fitness centre directly on campus