Roth Staffing is looking for a Security Engineer with Zscaler for contract position. This role is focused on strengthening identity security and zero trust operations-specifically managing service accounts and non-human identities, supporting Active Directory and Microsoft Entra ID integrations, and maintaining Zscaler infrastructure in AWS.
Please note:
Candidates represented by third party employers cannot be considered.
This is a 3-month contract-to-hire role to start, requiring onsite presence 5 days per week in Alameda, CA.
SUMMARY/JOB PURPOSE:
The Security Engineer will support the Zero Trust Engineering team in strengthening the security posture of our client's corporate systems, cloud environments, and infrastructure. This role will support identity security and secure access operations across enterprise platforms. This role will focus on service account management using Silverfort, integration with Active Directory, Microsoft Entra ID, and other identity platforms, operational support for AI-related and other security projects, and ongoing administration of Zscaler assets in AWS.
ESSENTIAL DUTIES AND RESPONSIBILITIES:
* Manage and support service accounts and other non-human identities using Silverfort, including discovery, policy implementation, monitoring, access reviews, and lifecycle governance.
* Assist with integration and operational support across Active Directory, Microsoft Entra ID, and other enterprise identity platforms to strengthen identity visibility, authentication controls, and access governance.
* Contribute to AI-related and other enterprise security projects, particularly where identity, authentication, access control, or service account usage is involved.
* Maintain and administer Zscaler App Connectors, including health monitoring, troubleshooting, patching, version upgrades, and operational maintenance.
* Develop, update, and maintain runbooks, standard operating procedures, and technical documentation for identity and Zscaler-related operations.
* Plan, document, and support disaster recovery drills involving Zscaler, ensuring procedures are tested, repeatable, and aligned with business continuity requirements.
* Work closely with security, infrastructure, cloud, and application teams to implement changes, resolve issues, and improve operational resilience.
* Provide troubleshooting support, issue analysis, and recommendations for service account security, identity integrations, and Zscaler-related incidents.
EDUCATION/EXPERIENCE/KNOWLEDGE & SKILLS:
Education:
BS/BA degree in Cybersecurity, Computer Science, Information Technology, or related discipline; or Equivalent combination of education, training, and hands-on experience.
Experience:
*Hands-on experience for service account life cycle management or identity security use cases.
*Strong knowledge of Active Directory, Microsoft Entra ID, and enterprise identity and access management concepts.
*Experience supporting Zscaler, especially App Connectors, including patching, upgrades, and operational troubleshooting.
*Experience writing and maintaining technical runbooks and operational procedures. Ability to support disaster recovery testing, system maintenance, and cross-functional security projects.
*Strong documentation, communication, and problem-solving skills.
*Familiarity with security tools or cloud platforms is advantageous but not required.
*Experience in a regulated or compliance-driven environment is a plus.
*Experience in AI/ML systems
Knowledge/Skills:
* Foundational knowledge of networking (TCP/IP, DNS, routing), operating systems (Windows,
Linux), and security fundamentals.
* Identity troubleshooting and root cause analysis.
* Basic understanding of threat vectors, attacker techniques, and defensive countermeasures.
* Ability to analyze logs and troubleshoot basic security or system issues.
* Familiarity with scripting (Python, PowerShell) is a plus.
* Strong written and verbal communication skills, with the ability to articulate technical topics
clearly.
* Strong customer service orientation and ability to work collaboratively with technical and
non-technical staff.
* Ability to prioritize tasks, follow procedures, and adapt to changing priorities.
* Demonstrated curiosity, eagerness to learn, and willingness to take on new challenges.
WORKING CONDITIONS:
Primarily working indoors in office scenarios.
Occasional after-hours support may be required for critical issues.
TECHNICAL SKILLS
Must Have
* Active Directory (AD)
* AWS Identity And Access Management (IAM)
* Azure Active Directory (AD)
* OS Platform Administration (Windows, MacOS) and Cloud Administration (AWS, Microsoft Azure)
* Service account provisioning, modification, and decommissioning
Nice To Have
* Identity Lifecycle Management
* Non-human identity (NHI) governance and lifecycle management
* Secure Service Edge Configurations
All qualified applicants will receive consideration for employment without regard to race, color, national origin, age, ancestry, religion, sex, sexual orientation, gender identity, gender expression, marital status, disability, medical condition, genetic information, pregnancy, or military or veteran status. We consider all qualified applicants, including those with criminal histories, in a manner consistent with state and local laws, including the California Fair Chance Act, City of Los Angeles' Fair Chance Initiative for Hiring Ordinance, Los Angeles County Fair Chance Ordinance, and San Francisco Fair Chance Ordinance.
