OpticoreIT
Security Engineer
Get notified of more jobs like this · No spam, ever
How your CV stacks up
Upload your CV to see how well it fits this job role
?%
Opticore IT Network Engineer and Project Management Consultancy
Opticore IT is a specialist Network Engineer and Project Management consultancy offering a wide variety of opportunities to work within fast-paced, challenging environments across our client base spanning multiple sectors including Finance, Broadcast Media, Telecommunications and more.
Opticore IT are currently searching for a Security Engineer who is highly competent with Zscaler to come and join the team for an initial 6 month contract inside IR35 with scope to extend. This opportunity will require two days a week on site in central London.
This opportunity will deliver Zscaler tenant separation, policy build-out, and operational readiness across ZIA and ZPA for a large-scale corporate divestiture programme, building a net-new tenant for the retained entity and ensuring bidirectional separacy between entities ahead of Day 1.
What you'll be doing:
- Build and configure a new Zscaler tenant (ZIA and ZPA) as full net-new deployment for the retained entity
- Configure ZIA internet security policies (URL filtering, threat protection, DLP, SSL inspection, cloud firewall) based on policies defined by the architect.
- Configure ZPA access, forwarding, inspection, and isolation policies; deploy ZPA App Connectors in retained-entity network segments and validate connectivity based on policies defined by the architect.
- Establish GRE tunnels from PoP internet routers to the new ZIA cloud instance and configure Zscaler Digital Experience (ZDX) monitoring
- Configure SAML/OIDC federation and attribute-based user routing between the new tenant and shared identity provider (e.g. Okta)
- Implement and validate bidirectional separacy controls between entities and configure automated policy audit mechanisms to detect and alert on separacy violations
- Configure Multi-ZPA Tenant Access for explicitly agreed shared services during the transitional period, with periodic access reviews
- Remove retained-entity users, policies, application segments, and App Connectors from the divested tenant, and reconfigure RBAC for the divested operations team
- Provide transitional administration of the divested tenant (platform, connector, and tunnel management) and support handover including admin transfer, IdP migration, and cross-tenant policy removal
- Configure independent cyber reporting (e.g. Zscaler 360i) for each tenant to prevent cross-entity data leakage
Reasons to use Rodeo
Start with a chat, not a search bar
Grad scheme, placement, apprenticeship? Not sure what you want yet — that's fine. Your agent talks it through with you and turns "I have no idea" into a shortlist.
It searches the market for you
Every day your agent scans the market matching roles against what actually matters to you, not just keywords on a CV.
Only hits
No noise. No "maybe this fits." Just roles with a clear explanation of why they're right — and where to focus when applying.
What you'll bring:
Get help with your application
Your very own career expert that helps elevate your application to the next level.
- Zscaler ZIA & ZPA Administration
- Identity Federation (SAML/OIDC, Okta, SCIM)
- Zscaler Multi-Tenant/Separation Delivery
- Zero Trust Network Access & Policy Design
- Zscaler Client Connector & GRE/IPSec Tunnel Integration
Diversity:
At Opticore IT we embrace diversity and are committed to equal opportunities. We actively recruit for an inclusive and diverse workforce and as such, want to ensure we do everything we can to support your application.
We want you to feel empowered to let us know if you require any adjustments to be made with your application or interview process so please speak to our recruitment team.
#LI-KB1
“It took my CV and asked me questions relevant to understanding what kind of jobs to suggest for me. Suggestions were almost perfect. Jobs were exactly what I’ve been looking for.”
Jessica, London
Skills
Location