RWE Supply & Trading GmbH
To start as soon as possible, full time, permanent
Department Insights
As a Senior Zscaler Engineer, you will play a key role in shaping and operating a future-proof network for RWE across more than 250 locations worldwide. You will leverage your expertise to implement and continuously evolve the company-specific network architecture and strategy, ensuring alignment with the Group's strategic objectives in close collaboration with internal stakeholders and external partners.
You will join the Connectivity & Network Peripherals department - a dynamic and highly skilled team responsible for the end-to-end network and network security landscape, including 2nd and 3rd level support. Beyond day-to-day operations, the team plays a crucial role in driving forward-looking projects, enabling new business capabilities, and continuously improving the overall infrastructure across the Group.
This position offers you a high level of ownership, the opportunity to work with cutting-edge technologies like Zscaler, and the chance to make a visible impact in a complex, international environment.
Overview
We are seeking an experienced Zscaler Engineer to design, implement, and support our enterprise Zero Trust security posture using the Zscaler platform (ZIA, ZPA, ZDX). The ideal candidate will have strong knowledge of clouddelivered security services, identityintegrated policy enforcement, and networking fundamentals. This role will work closely with Security, Networking, EUC, and Architecture teams to ensure secure, highperformance access for users, devices, and workloads.
Key Responsibilities
Platform Administration
* Administer, maintain, and optimize Zscaler Internet Access (ZIA) and Zscaler Private Access (ZPA) tenant environments.
* Create, update, and validate security policies, URL filtering, SSL inspection rules, access rules, and zero trust application segmentation.
* Manage and maintain authentication integrations (IdP, SAML, SCIM, SSO, user provisioning).
Zero Trust Architecture & Design
* Contribute to Zero Trust strategies leveraging Zscaler Zero Trust Exchange.
* Assist with designing secure access paths for internal/private applications using ZPA App Connectors and Segment Groups.
* Support microsegmentation design and application mapping.
Deployment & Configuration
* Deploy Zscaler Client Connector (ZCC) across endpoints; manage upgrade cadence and posture rules.
* Integrate Zscaler with identity providers (Azure AD / Okta), SIEM, EDR/XDR, and firewall platforms.
* Work with network teams to ensure proper GRE/IPSec tunneling or PAC file configurations.
Monitoring, Troubleshooting & Support
* Use Zscaler logs, NSS feeds, and ZDX for diagnostics and performance troubleshooting.
* Provide 3rdline support for connectivity, policy, and application issues.
* Engage Zscaler Support when required and track case progress through resolution.
Governance & Security Management
* Ensure alignment with internal security frameworks and compliance requirements.
* Produce documentation, runbooks, architectural diagrams, and operational guidelines.
* Assist with audits, risk assessments, and policy reviews.
Continuous Improvement
* Monitor new features, releases, and best practice advisories from Zscaler.
* Drive capability enhancements, automation, and platform optimization.
* Support user experience improvements through ZDX insights and reporting.
Required Skills & Experience
Technical
* Strong experience with ZIA, ZPA, and ZCC administration.
* Solid understanding of Zero Trust Network Access (ZTNA) principles.
* Deep knowledge of routing, TCP/IP, DNS, VPNs, proxies, TLS/SSL, and authentication flows.
* Experience with Azure AD/Entra ID, Okta, or similar identity platforms.
* Familiarity with SIEM integrations, log forwarding, and security monitoring.
* Understanding of SDWAN integrations and networktocloud routing.
Professional
* Strong analytical, troubleshooting, and problemsolving skills.
* Ability to communicate complex technical topics to both technical and nontechnical audiences.
* Experience working in enterprise environments with change control and security governance.
Preferred
* Zscaler Certifications, such as:
* ZDTA - Zscaler Digital Transformation Administrator
* ZDTE - Zscaler Digital Transformation Engineer
* ZDXA - Zscaler Digital Experience Administrator
* Experience with automation (PowerShell, Python, Terraform).
* Knowledge of cloud platforms (Azure, AWS, GCP).
Education & Background
* Degree in Computer Science, Cybersecurity, Networking, or equivalent experience.
* 3-7 years experience in network security, cloud security, or endpoint security.
Our offer
* A highly motivated dynamic team with a "you" mentality and fun at work
* Modern company campus with several company restaurants and coffee bars with free fruit and drinks
* Ample employee parking through our own parking garages on campus
* Flexible working in the office and remotely (hybrid model)
* Attractive remuneration with annual discretionary bonus plus additional benefits such as employer-funded company pension scheme and employee discounts
* Extensive health management with own fitness centre directly on campus
Apply now with just a few clicks: ad code 92225
Any questions? Vince Manning (Recruiting),
We look forward to meeting you!
We value diversity and therefore welcome all applications, irrespective of gender, disability, nationality, ethnic and social background, religion and beliefs, age or sexual orientation and identity.
Of course, you can find us on LinkedIn, Twitter and Xing, too.
RWE Supply & Trading is the interface between RWE and the energy markets around the world. Approximately 2000 employees from over 50 different countries trade (renewable) electricity, (green) gas, commodities and CO2 emission allowances. The trading entity also ensures the commercial optimisation of RWE's power plant dispatch and markets electricity from renewables.