Senior Zscaler Administrator

Title: Senior Zscaler Administrator KBR is seeking a Senior Zscaler Administrator to join our global cybersecurity and secure access team. This senior-level engineering role combines Zero Trust architecture, secure access administration, cloud security, endpoint integration, automation, and operational excellence across complex enterprise environments. You will play a key role in supporting and enhancing enterprise secure access services across Zscaler Internet Access (ZIA), Zscaler Private Access (ZPA), Zscaler Digital Experience (ZDX), and Zscaler Client Connector (ZCC), helping to strengthen security controls while enabling a modern, distributed workforce. Partnering closely with cybersecurity, networking, identity, endpoint, cloud, infrastructure, and service delivery teams, you will design, implement, and support secure access solutions that improve user experience, reduce operational risk, and advance KBR's Zero Trust and SASE capabilities. The ideal candidate brings deep expertise across Zscaler technologies, enterprise networking, identity integrations, and secure access platforms, with a proven ability to support large-scale, highly regulated environments. This is a permanent, full-time position based in the United Kingdom. Due to the nature of the work and customer requirements, candidates must be eligible to obtain and maintain the appropriate UK Security Clearance. In September 2025, KBR announced that we are spinning our Mission Technology Solutions business into a separate public company. This role will ultimately be part of the new company. The Mission Technology Solutions business partners with governments and defense, intelligence, space, aviation, and critical infrastructure customers to deliver high-end engineering, science, technology, and mission support solutions. Key Responsibilities Administer, support, and enhance Zscaler Internet Access (ZIA), Zscaler Private Access (ZPA), Zscaler Digital Experience (ZDX), and Zscaler Client Connector (ZCC) environments. Configure and maintain access policies, forwarding profiles, application segments, connector groups, URL filtering, SSL inspection, cloud firewall controls, and data protection policies. Monitor platform health, user experience, security events, application access, performance metrics, and operational trends across the Zscaler ecosystem. Troubleshoot complex client connectivity, authentication, application access, policy enforcement, and cloud security issues independently. Support deployment, lifecycle management, upgrades, remediation, and troubleshooting of Zscaler Client Connector across Windows, macOS, iOS, and Android devices. Partner with endpoint management teams to deploy and maintain Zscaler Client Connector using Microsoft Intune, Windows Autopilot, Jamf, and similar endpoint management platforms. Support integrations with Microsoft Entra ID, Active Directory, Conditional Access, Single Sign-On (SSO), Multifactor Authentication (MFA), and related identity services. Deploy, validate, and maintain ZPA App Connectors across on-premises, cloud, hybrid, and segmented network environments. Participate in incident, problem, change, and vulnerability management processes within enterprise CAB-controlled environments. Develop automation, scripts, reporting, and operational tooling to support compliance validation, health monitoring, troubleshooting, and remediation activities. Create and maintain technical documentation, operational standards, implementation guides, support runbooks, and knowledge transfer materials. Collaborate with cybersecurity, networking, endpoint, cloud, infrastructure, and service management teams to improve secure access capabilities and operational maturity. Support strategic initiatives including Zero Trust transformation, SASE adoption, VPN modernization, tenant migrations, divestitures, and enterprise technology transformation programmes. Drive continuous improvement initiatives focused on automation, service reliability, operational efficiency, and user experience. Basic Qualifications Education & Experience Bachelor's degree in Cybersecurity, Information Technology, Computer Science, Engineering, Information Systems, or a related discipline; or an equivalent combination of education, technical training, certifications, and relevant experience. 7+ years of experience supporting enterprise cybersecurity, networking, secure access, or cloud security environments. Hands-on experience administering Zscaler Internet Access (ZIA) and Zscaler Private Access (ZPA) within complex enterprise organisations. Experience supporting secure remote access, cloud security platforms, application connectivity, and Zero Trust security initiatives. Experience working within large-scale, highly regulated environments. Eligibility to obtain and maintain the appropriate UK Security Clearance. Skills & Competencies Deep expertise administering Zscaler Internet Access (ZIA), Zscaler Private Access (ZPA), Zscaler Digital Experi