World Wide Technology
We are seeking an experienced Zscaler Private Access (ZPA) Lead Engineer to join our cybersecurity engineering team. This role will serve as the platform specialist and technical authority for Zscaler Private Access, driving the design, implementation, and optimisation of secure remote access and network segmentation strategies across the enterprise environment. The ideal candidate will bring deep technical expertise in Zscaler ZPA, a strong background in enterprise access control, and a hands-on approach to solution design, policy development, and operational excellence. Key responsibilities Act as the technical lead and subject matter expert (SME) for Zscaler Private Access (ZPA). Design, implement, and maintain secure access control, segmentation, and role-based access control (RBAC) policies. Integrate Active Directory (AD) and LDAP groups for seamless enforcement of user and application access controls. Analyse Zscaler logs and telemetry to troubleshoot, optimise configurations, and improve performance. Review and contribute to solution architecture documentation, low-level designs, and implementation frameworks. Collaborate closely with the Enterprise Security Architecture team to align ZPA strategy with broader security objectives. Provide hands-on engineering support during deployment, change management, and transition to operations. Mentor and lead ZPA engineers, providing technical guidance and operational oversight. Partner with the Zscaler Internet Access (ZIA) team to ensure consistency across access and security policies. Required skills and experience Proven experience in Zscaler ZPA architecture, design, deployment, and administration. Strong understanding of network segmentation, access control models, AD integration, and RBAC frameworks. Ability to analyse and interpret logs for diagnostics, tuning, and performance improvements. Experience in solution architecture and systems engineering, including translating business requirements into actionable technical designs. Familiarity with enterprise security architecture principles, identity and access management (IAM), and secure networking. Excellent communication, documentation, and stakeholder engagement skills. Demonstrated leadership and mentoring experience within technical or engineering teams. Preferred qualifications Zscaler Certified Cloud Professional (ZCCP-PA or ZCCP-IA) or equivalent certifications. Experience working within financial services, government, or large enterprise environments. Familiarity with Zero Trust Network Access (ZTNA) and related frameworks. About World Wide Technology World Wide Technology (WWT) is a global technology solutions provider. Founded in 1990, we combine strategy, technical expertise and strong technology partnerships to help public and private organisations build and scale AI, digital, cybersecurity, cloud and infrastructure solutions. Our Advanced Technology Center lets clients design, test and prove solutions before they deploy them at scale. With more than 14,000 team members in over 60 locations, we are proud to be recognised by Fortune and Great Place to Work. Equal opportunity employer World Wide Technology is an equal opportunity employer. We consider all qualified applicants without regard to race, colour, religion, sex, sexual orientation, gender identity, national origin, age, disability, veteran status or any other characteristic protected by law. We are committed to making reasonable adjustments for applicants with disabilities, so please let us know if you need support at any stage of the process.
We are seeking an experienced Zscaler Private Access (ZPA) Lead Engineer to join our cybersecurity engineering team. This role will serve as the platform specialist and technical authority for Zscaler Private Access, driving the design, implementation, and optimisation of secure remote access and network segmentation strategies across the enterprise environment. The ideal candidate will bring deep technical expertise in Zscaler ZPA, a strong background in enterprise access control, and a hands-on approach to solution design, policy development, and operational excellence. Key responsibilities Act as the technical lead and subject matter expert (SME) for Zscaler Private Access (ZPA). Design, implement, and maintain secure access control, segmentation, and role-based access control (RBAC) policies. Integrate Active Directory (AD) and LDAP groups for seamless enforcement of user and application access controls. Analyse Zscaler logs and telemetry to troubleshoot, optimise configurations, and improve performance. Review and contribute to solution architecture documentation, low-level designs, and implementation frameworks. Collaborate closely with the Enterprise Security Architecture team to align ZPA strategy with broader security objectives. Provide hands-on engineering support during deployment, change management, and transition to operations. Mentor and lead ZPA engineers, providing technical guidance and operational oversight. Partner with the Zscaler Internet Access (ZIA) team to ensure consistency across access and security policies. Required skills and experience Proven experience in Zscaler ZPA architecture, design, deployment, and administration. Strong understanding of network segmentation, access control models, AD integration, and RBAC frameworks. Ability to analyse and interpret logs for diagnostics, tuning, and performance improvements. Experience in solution architecture and systems engineering, including translating business requirements into actionable technical designs. Familiarity with enterprise security architecture principles, identity and access management (IAM), and secure networking. Excellent communication, documentation, and stakeholder engagement skills. Demonstrated leadership and mentoring experience within technical or engineering teams. Preferred qualifications Zscaler Certified Cloud Professional (ZCCP-PA or ZCCP-IA) or equivalent certifications. Experience working within financial services, government, or large enterprise environments. Familiarity with Zero Trust Network Access (ZTNA) and related frameworks. About World Wide Technology World Wide Technology (WWT) is a global technology solutions provider. Founded in 1990, we combine strategy, technical expertise and strong technology partnerships to help public and private organisations build and scale AI, digital, cybersecurity, cloud and infrastructure solutions. Our Advanced Technology Center lets clients design, test and prove solutions before they deploy them at scale. With more than 14,000 team members in over 60 locations, we are proud to be recognised by Fortune and Great Place to Work. Equal opportunity employer World Wide Technology is an equal opportunity employer. We consider all qualified applicants without regard to race, colour, religion, sex, sexual orientation, gender identity, national origin, age, disability, veteran status or any other characteristic protected by law. We are committed to making reasonable adjustments for applicants with disabilities, so please let us know if you need support at any stage of the process.
World Wide Technology
World Wide Technology (WWT) is a global technology solutions provider, founded in 1990, that helps organisations turn strategy into results. In the UK, we bring that global scale and our Advanced Technology Center expertise to clients across the public and private sectors. We design, build and prove solutions in infrastructure, security, cloud and digital, before they go live. Our people are our biggest asset, and we invest in them. Make a new world happen with us. Join a team that designs, builds and runs the core network services every application depends on. You will engineer and integrate DDI platforms, then automate them so they scale cleanly across a large enterprise estate. What you'll do Engineer, build and integrate enterprise DDI platforms (DNS, DHCP and IPAM), from design through to live service. Integrate DDI with the wider estate: cloud and virtualisation platforms, network and security tooling, CMDBs, ITSM, and identity and directory services such as Active Directory. Design and deploy resilient DNS and DHCP architectures, including HA pairs, grid and appliance deployments, views, zones, forwarders, DNSSEC and scope design. Run migrations and upgrades between DDI platforms, with cutover planning, testing and rollback. Automate repeatable DDI tasks and integrations through APIs, scripts and pipelines, so IP allocation, record management and provisioning no longer rely on manual work. Write the artefacts that go with the build: HLDs and LLDs, configuration standards, test plans and runbooks. Own delivery of your workstream: raise and present changes, coordinate with network, security and application teams, then validate and hand over to operations. Troubleshoot DNS, DHCP and IP Addressing issues across complex, multi-site environments. What you'll need DDI integration and engineering. Proven hands-on experience designing, building and integrating DDI platforms in a large enterprise. Hands-on with at least one enterprise DDI platform. BlueCat, Cygna VitalQIP or Infoblox are all preferred. Strong DNS, DHCP and IPAM - Authoritative and recursive DNS, split-horizon design, DHCP failover and relay, subnet and address planning, and IPv4 and IPv6. Automation skills- Scripting and API-driven automation using Python, PowerShell or Ansible, including REST integration with DDI platforms. Network understanding - Solid grounding in TCP/IP, routing and switching, and how DDI services sit within the network. Nice to have Experience with more than one DDI platform, or a platform-to-platform migration. Infrastructure-as-code and pipeline experience (Terraform, Git, CI/CD) applied to DDI or network services. Cloud DNS and hybrid DNS design (AWS Route 53, Azure DNS) and cloud IPAM integration. DNS security experience, including DNSSEC, DNS Firewalling and logging for threat detection. Certifications Vendor certification desirable (BlueCat, Infoblox or equivalent). Network certification such as CCNP desirable. Automation or cloud certification a plus (for example Red Hat Ansible, AWS or Azure). Equal opportunities WWT is an equal opportunity employer. We are committed to an inclusive workplace where everyone is treated fairly and with respect. We welcome applications from all qualified candidates, regardless of age, disability, gender identity or reassignment, marriage or civil partnership, pregnancy or maternity, race, religion or belief, sex or sexual orientation
World Wide Technology (WWT) is a global technology solutions provider, founded in 1990, that helps organisations turn strategy into results. In the UK, we bring that global scale and our Advanced Technology Center expertise to clients across the public and private sectors. We design, build and prove solutions in infrastructure, security, cloud and digital, before they go live. Our people are our biggest asset, and we invest in them. Make a new world happen with us. Join a team that designs, builds and runs the core network services every application depends on. You will engineer and integrate DDI platforms, then automate them so they scale cleanly across a large enterprise estate. What you'll do Engineer, build and integrate enterprise DDI platforms (DNS, DHCP and IPAM), from design through to live service. Integrate DDI with the wider estate: cloud and virtualisation platforms, network and security tooling, CMDBs, ITSM, and identity and directory services such as Active Directory. Design and deploy resilient DNS and DHCP architectures, including HA pairs, grid and appliance deployments, views, zones, forwarders, DNSSEC and scope design. Run migrations and upgrades between DDI platforms, with cutover planning, testing and rollback. Automate repeatable DDI tasks and integrations through APIs, scripts and pipelines, so IP allocation, record management and provisioning no longer rely on manual work. Write the artefacts that go with the build: HLDs and LLDs, configuration standards, test plans and runbooks. Own delivery of your workstream: raise and present changes, coordinate with network, security and application teams, then validate and hand over to operations. Troubleshoot DNS, DHCP and IP Addressing issues across complex, multi-site environments. What you'll need DDI integration and engineering. Proven hands-on experience designing, building and integrating DDI platforms in a large enterprise. Hands-on with at least one enterprise DDI platform. BlueCat, Cygna VitalQIP or Infoblox are all preferred. Strong DNS, DHCP and IPAM - Authoritative and recursive DNS, split-horizon design, DHCP failover and relay, subnet and address planning, and IPv4 and IPv6. Automation skills- Scripting and API-driven automation using Python, PowerShell or Ansible, including REST integration with DDI platforms. Network understanding - Solid grounding in TCP/IP, routing and switching, and how DDI services sit within the network. Nice to have Experience with more than one DDI platform, or a platform-to-platform migration. Infrastructure-as-code and pipeline experience (Terraform, Git, CI/CD) applied to DDI or network services. Cloud DNS and hybrid DNS design (AWS Route 53, Azure DNS) and cloud IPAM integration. DNS security experience, including DNSSEC, DNS Firewalling and logging for threat detection. Certifications Vendor certification desirable (BlueCat, Infoblox or equivalent). Network certification such as CCNP desirable. Automation or cloud certification a plus (for example Red Hat Ansible, AWS or Azure). Equal opportunities WWT is an equal opportunity employer. We are committed to an inclusive workplace where everyone is treated fairly and with respect. We welcome applications from all qualified candidates, regardless of age, disability, gender identity or reassignment, marriage or civil partnership, pregnancy or maternity, race, religion or belief, sex or sexual orientation
