{"id":3114520,"url":"https://alion.io/job/kbr-senior-zscaler-administrator","title":"Senior Zscaler Administrator","company":{"id":4344,"name":"KBR","domain":"kbr.com","url":"https://alion.io/company/kbr","size_band":"5000+","is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"Workday","truth_index":{"grade":"B","score":80,"open_postings":362,"ghost_share":0,"stale_share":1,"repost_share":0,"time_to_fill_p50_days":7,"computed_at":"2026-10-27T05:46:45Z"}},"role":"HR","role_family":"HR","seniority":"senior","employment_type":"full_time","work_mode":"on_site","remote_scope":null,"remote_scope_basis":null,"remote_working_hours":null,"hiring_geo_confidence":"explicit","locations":["Leatherhead, United Kingdom"],"countries":["GB"],"hiring_countries":[],"hiring_countries_total":0,"salary":null,"salary_estimate":{"min_usd":60000,"max_usd":115000,"period":"year","method":"role_seniority_country_remote_cell","sample_n":70},"experience_years_min":7,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"Active Directory","optional":false},{"name":"DNS","optional":false},{"name":"Least Privilege","optional":false},{"name":"Microsoft Entra ID","optional":false},{"name":"PowerShell","optional":false},{"name":"TCP/IP","optional":false},{"name":"VPN","optional":false},{"name":"Windows","optional":false},{"name":"Zero Trust","optional":false},{"name":"Zscaler","optional":false},{"name":"Azure","optional":true},{"name":"ISO 27001","optional":true},{"name":"Microsoft Defender","optional":true},{"name":"SIEM","optional":true}],"status":"live","first_seen_at":"2026-07-27T00:00:00Z","employer_posted_date":"2026-07-27","last_verified_at":"2026-10-27T15:01:40Z","board_verified":true,"closed_at":null,"days_open":92,"trust":{"level":"stale","repost_count":0,"flags":["stale"],"days_open":92},"description":"Title:\nSenior Zscaler AdministratorKBR is seeking a Senior Zscaler Administrator to join our global cybersecurity and secure access team. This senior-level engineering role combines Zero Trust architecture, secure access administration, cloud security, endpoint integration, automation, and operational excellence across complex enterprise environments. You will play a key role in supporting and enhancing enterprise secure access services across Zscaler Internet Access (ZIA), Zscaler Private Access (ZPA), Zscaler Digital Experience (ZDX), and Zscaler Client Connector (ZCC), helping to strengthen security controls while enabling a modern, distributed workforce.\nPartnering closely with cybersecurity, networking, identity, endpoint, cloud, infrastructure, and service delivery teams, you will design, implement, and support secure access solutions that improve user experience, reduce operational risk, and advance KBR's Zero Trust and SASE capabilities. The ideal candidate brings deep expertise across Zscaler technologies, enterprise networking, identity integrations, and secure access platforms, with a proven ability to support large-scale, highly regulated environments.\nThis is a permanent, full-time position based in the United Kingdom. Due to the nature of the work and customer requirements, candidates must be eligible to obtain and maintain the appropriate UK Security Clearance.\nIn September 2025, KBR announced that we are spinning our Mission Technology Solutions business into a separate public company. This role will ultimately be part of the new company. The Mission Technology Solutions business partners with governments and defense, intelligence, space, aviation, and critical infrastructure customers to deliver high-end engineering, science, technology, and mission support solutions.\nKey Responsibilities\nAdminister, support, and enhance Zscaler Internet Access (ZIA), Zscaler Private Access (ZPA), Zscaler Digital Experience (ZDX), and Zscaler Client Connector (ZCC) environments.\nConfigure and maintain access policies, forwarding profiles, application segments, connector groups, URL filtering, SSL inspection, cloud firewall controls, and data protection policies.\nMonitor platform health, user experience, security events, application access, performance metrics, and operational trends across the Zscaler ecosystem.\nTroubleshoot complex client connectivity, authentication, application access, policy enforcement, and cloud security issues independently.\nSupport deployment, lifecycle management, upgrades, remediation, and troubleshooting of Zscaler Client Connector across Windows, macOS, iOS, and Android devices.\nPartner with endpoint management teams to deploy and maintain Zscaler Client Connector using Microsoft Intune, Windows Autopilot, Jamf, and similar endpoint management platforms.\nSupport integrations with Microsoft Entra ID, Active Directory, Conditional Access, Single Sign-On (SSO), Multifactor Authentication (MFA), and related identity services.\nDeploy, validate, and maintain ZPA App Connectors across on-premises, cloud, hybrid, and segmented network environments.\nParticipate in incident, problem, change, and vulnerability management processes within enterprise CAB-controlled environments.\nDevelop automation, scripts, reporting, and operational tooling to support compliance validation, health monitoring, troubleshooting, and remediation activities.\nCreate and maintain technical documentation, operational standards, implementation guides, support runbooks, and knowledge transfer materials.\nCollaborate with cybersecurity, networking, endpoint, cloud, infrastructure, and service management teams to improve secure access capabilities and operational maturity.\nSupport strategic initiatives including Zero Trust transformation, SASE adoption, VPN modernization, tenant migrations, divestitures, and enterprise technology transformation programmes.\nDrive continuous improvement initiatives focused on automation, service reliability, operational efficiency, and user experience.\nBasic Qualifications\nEducation & Experience\nBachelor's degree in Cybersecurity, Information Technology, Computer Science, Engineering, Information Systems, or a related discipline; or an equivalent combination of education, technical training, certifications, and relevant experience.\n7+ years of experience supporting enterprise cybersecurity, networking, secure access, or cloud security environments.\nHands-on experience administering Zscaler Internet Access (ZIA) and Zscaler Private Access (ZPA) within complex enterprise organisations.\nExperience supporting secure remote access, cloud security platforms, application connectivity, and Zero Trust security initiatives.\nExperience working within large-scale, highly regulated environments.\nEligibility to obtain and maintain the appropriate UK Security Clearance.\nSkills & Competencies\nDeep expertise administering Zscaler Internet Access (ZIA), Zscaler Private Access (ZPA), Zscaler Digital Experience (ZDX), and Zscaler Client Connector (ZCC).\nStrong knowledge of Zero Trust Network Access (ZTNA), Secure Access Service Edge (SASE), and modern secure access architectures.\nExperience managing access policies, forwarding profiles, application segments, connector groups, URL filtering, SSL inspection, cloud firewall controls, and data protection capabilities.\nStrong understanding of TCP/IP, DNS, routing, VPN technologies, proxies, firewall technologies, and secure web gateway concepts.\nExperience troubleshooting SSL/TLS inspection, certificate services, authentication flows, identity integrations, and SSO technologies.\nKnowledge of segmentation, least-privilege access models, security policy enforcement, and access governance principles.\nExperience supporting Microsoft Entra ID, Active Directory, Conditional Access, MFA, and hybrid identity environments.\nFamiliarity with Microsoft Intune, endpoint compliance frameworks, and modern endpoint management practices.\nStrong PowerShell scripting and automation skills.\nExperience with log analysis, packet capture interpretation, root-cause analysis, and structured troubleshooting methodologies.\nExcellent communication, documentation, stakeholder management, and technical problem-solving capabilities.\nPreferred Qualifications\nExperience supporting Microsoft Defender for Endpoint, Microsoft 365 Security, and integrated Microsoft security platforms.\nKnowledge of Microsoft Azure administration, cloud networking, and hybrid cloud infrastructure.\nExperience with SIEM integrations, log analytics, reporting platforms, dashboarding, and security monitoring solutions.\nExperience with Bash scripting, automation tools, and infrastructure operations.\nExperience supporting government, defence, aerospace, critical infrastructure, energy, transportation, or other highly regulated sectors.\nFamiliarity with UK government security frameworks, Cyber Essentials Plus, NCSC guidance, ISO 27001, NIST frameworks, and other relevant security and compliance standards.\nExperience supporting secure access transformations, VPN replacement initiatives, mergers, acquisitions, divestitures, tenant migrations, or large-scale enterprise modernisation programmes.\nPreferred Certifications\nZscaler Certified Cloud Administrator (ZCCA) or equivalent Zscaler administrator certification\nZscaler Certified Cloud Professional (ZCCP) or specialised ZIA/ZPA certifications.\nMicrosoft security, identity, endpoint, or Azure certifications.\nCompTIA Security+, CISSP, CISM, CCSP, or equivalent cybersecurity certifications.\nMicrosoft Certified: Cybersecurity Architect Expert, Azure Administrator Associate, or other relevant cloud security certifications.","description_format":"text","description_chars":7693,"description_truncated":false,"requirements":{"experience_years_min":7,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":{"level":"bachelor","optional":false},"security_clearance":false,"languages":[]},"benefits":[],"hiring_locations":[{"name":"United Kingdom","iso":"GB","kind":"country"}],"hiring_excludes":[],"relocation_offered":false,"industries":["Cloud Security","Military Logistics","Space Services","Engineering Services"],"lifecycle":[{"event":"open","at":"2026-10-22T21:42:48Z"}],"visa":[],"liveness":{"score":4,"band":"cold","label":"Long shot","p_open":0.9,"p_active":0.147,"p_room":0.28,"age_days":92,"expected_fill_days":7,"reasons":["conf:72","stale_co","velocity","win:tail","crowd:brand"],"computed_at":"2026-10-27T05:46:45Z"},"pay":null,"html_url":"https://alion.io/job/kbr-senior-zscaler-administrator","json_url":"https://alion.io/job/kbr-senior-zscaler-administrator.json","meta":{"generated_at":"2026-10-27T17:56:07Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":7762,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-10-28T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.02,"usd":0.002,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":4344},"rest":"https://alion.io/mcp/rest/get_company?id=4344"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Fkbr-senior-zscaler-administrator"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":1,"usd":0.1},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Fkbr-senior-zscaler-administrator"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.02,"usd":0.002},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Fkbr-senior-zscaler-administrator"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/kbr-senior-zscaler-administrator\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Fkbr-senior-zscaler-administrator"}]}