Help AG is looking for a talented & experienced Senior Security Consultant whose primarily focused on post-sales professional services activities, with additional involvement in pre-sales activities when required.
The role will have a strong focus on Zscaler technologies, particularly Zscaler Internet Access (ZIA) and Zscaler Private Access (ZPA), and requires extensive hands-on experience in designing, implementing, migrating, optimizing, and troubleshooting Zscaler solutions in large and complex enterprise environments.
The successful candidate must have proven experience delivering large-scale Zscaler deployments supporting approximately 50,000 or more users/endpoints, including experience with high availability, resiliency, and disaster recovery requirements.
Post-sales activities include architecture validation, implementation and integration, migration planning and execution, configuration review, troubleshooting, optimization, documentation, knowledge transfer, and technical leadership.
Presales activities may include solution presentations, technical workshops, proof of concepts, effort estimation, and support in developing Statements of Work.
The primary objectives of the role are customer satisfaction, technical excellence, professionalism, accuracy, and high-quality project delivery.
Act as a Zscaler Subject Matter Expert (SME) for Help AG customers.
Lead large and complex ZIA and ZPA deployments.
Architect, design, implement and optimize Zscaler solutions.
Lead technical activities across multiple customer and vendor teams.
Take technical ownership of Zscaler implementation projects.
Validate solution architecture and identify technical gaps or risks.
Lead production migration and rollout activities.
Develop migration strategies for large user and application populations.
Develop implementation, migration and rollback plans.
Troubleshoot complex Zscaler, network, application and identity issues.
Lead technical workshops with customers.
Provide guidance and mentoring to other Help AG engineers.
Conduct knowledge-transfer sessions for internal teams and customers.
Work closely with Zscaler Professional Services and Support.
Maintain project technical documentation.
Develop HLDs, LLDs, migration plans and implementation runbooks.
Support presales teams with technical solution design.
Support preparation and validation of project Statements of Work.
Lead and deliver customer POCs.
Identify project technical risks and dependencies early.
Escalate customer-side and vendor-side dependencies that could impact delivery.
Maintain high standards of customer satisfaction and technical delivery quality.
Bachelor’s degree in Information Security, IT, Computer Science, or equivalent experience.
Minimum 7+ years of experience in Cybersecurity, Network Security, or Secure Access technologies.
Minimum 4+ years of strong hands-on experience with Zscaler technologies, particularly ZIA and ZPA.
Proven experience delivering large-scale enterprise Zscaler deployments.
Must have participated as a lead or senior engineer in at least one large Zscaler implementation supporting approximately 50,000+ users/endpoints or an environment of comparable complexity.
Strong hands-on experience with both greenfield Zscaler deployments and migrations of existing enterprise environments to Zscaler.
Experience working in large, complex and geographically distributed enterprise environments.
Experience working for cybersecurity/system integration/IT consulting organizations is highly preferred.
Experience interacting with senior customer stakeholders, network/security teams, application teams, infrastructure teams and vendor Professional Services.
Strong experience in enterprise change management, migration planning, cutover execution, rollback planning and troubleshooting.
Proven experience delivering large-scale Zscaler deployments for enterprise environments with approximately 50,000+ users/endpoints.
Strong experience with Zscaler Client Connector, Tunnel 2.0, GRE/IPsec, PAC files, SSL Inspection, URL Filtering, Cloud App Control, Firewall, App Connectors, Application Segments, and Access Policies.
Experience with high availability, resiliency, and Disaster Recovery (DR) design and implementation for Zscaler environments.
Strong networking knowledge, including TCP/IP, routing, BGP, OSPF, DNS, NAT, VPN, proxy technologies, firewalls, and SSL/TLS.
Good understanding of enterprise identity technologies, including Active Directory, Entra ID, SAML, SSO, SCIM, and MFA.
Experience with Azure, AWS, and hybrid cloud environments.
Experience with other cybersecurity technologies such as Palo Alto, Fortinet, F5, Netskope, CyberArk, or Splunk is an advantage.
Strong troubleshooting skills across Zscaler, networking, identity, endpoint, and application layers.
Proven ability to independently lead complex Zscaler implementation projects from design validation through production rollout.
Ability to develop and review HLDs, LLDs, implementation plans, migration plans, test plans, and rollback procedures.
Strong customer-facing, communication, presentation, documentation, and technical leadership skills.
Ability to independently lead complex enterprise security deployments and coordinate with customers, vendors, and internal teams.
Excellent customer-facing communication skills.
Strong technical leadership.
Ability to explain complex technical concepts to technical and management stakeholders.
Strong analytical and problem-solving skills.
Ability to work effectively under pressure during production migrations and incidents.
Ability to manage multiple teams and technical dependencies.
Strong documentation and presentation skills.
Ability to independently manage technical workstreams.
Strong ownership and accountability.
Ability to mentor and guide other engineers.
Excellent written and spoken English.
Arabic language skills are considered an advantage.