network security engineer for Zscaler

Watchmen is an IT consultancy company focused on Cloud, Network, and Security. It guides enterprise clients in realizing Zero Trust and has the largest number of Zscaler Aces in the Benelux.

• Design and implement Zscaler Internet Access (ZIA), Zscaler Private Access (ZPA), and Zscaler Digital Experience (ZDX) at enterprise scale
• Lead migrations from legacy VPN, proxy, and perimeter-based architectures to a Zero Trust model
• Build and tune access policies, SSL inspection, DLP, and segmentation aligned with client security requirements
• Integrate Zscaler with identity providers, SIEM/SOAR platforms, and the wider client security stack
• Troubleshoot complex connectivity, routing, and performance issues across hybrid environments
• Advise client architects and security leads on Zero Trust strategy, roadmaps, and adoption
• Share knowledge internally and help develop the team’s Zscaler capability
• Own Zero Trust transformation at enterprise clients by designing, deploying, and operating ZIA, ZPA, and ZDX environments
• Depending on the level, handle hands-on migration and policy engineering or own target architecture and advise client stakeholders
• Serve as the technical authority and help clients achieve outcomes

• Demonstrable hands-on experience with Zscaler in a production enterprise environment, including ZIA and/or ZPA
• Solid networking foundation, including routing, DNS, TLS/SSL, proxy behavior, and GRE/IPSec tunneling
• Understanding of Zero Trust and SASE/SSE principles beyond vendor marketing
• Experience working with or advising enterprise clients, with communication skills to hold your ground with them
• Fluent English
• EU work authorization
• Будет плюсом: German, Dutch, and/or French, Zscaler certifications (ZDTA, ZIA-EA, ZPA-EA, or ZTCA), Zscaler Ace status, broader security vendor experience (Palo Alto, PCNSE, PCSAE, Cisco, Netskope, Fortinet), automation experience (Python, Ansible, Terraform)

• Competitive salary aligned with experience and certification level, benchmarked against the market for senior Zscaler expertise
• Unlimited certification and training budget
• Occasional travel may be required for individual client engagements
• Direct access to the CEO and leadership team from day one, with no layers between employees and decision-makers
• Work alongside the largest concentration of Zscaler expertise in the Benelux on Zero Trust programs at national-scale organizations
• Hiring across the EU; depending on location, employment may be through the Dutch or Belgian entity, or arranged as a contracting engagement