Engagement channel: Managed Service Provider (MSP) assignment
Location: Avenue Jean Mermoz 14, 6041 Gosselies, Belgium
Working arrangement: 3 days per week; hybrid/remote arrangement is not specified in the request and should be confirmed during the selection process
Preferred start date: 01 September 2026
Preferred end date: 30 November 2026 (Extendable)
Commitment: 3 days per week
Number of consultants: 1
Languages: English B2 and French B2 (CEFR)
On-call: Not applicable
Role Overview
We are seeking a Senior Zscaler Consultant with strong hands-on expertise in Zscaler Internet Access (ZIA) and Zscaler Private Access (ZPA) to support the design, documentation, implementation and pilot migration of a Zero Trust security platform. The consultant will help transition users and applications from a legacy FortiClient/FortiEMS-based remote-access environment to Zscaler, while working alongside the client’s technical resources and supporting knowledge transfer.
Key Responsibilities
· Design the target ZIA and ZPA architecture.
· Analyse existing ZIA configurations, FortiClient VPN usage, applications, network flows and technical/organizational dependencies.
· Define and implement ZIA and ZPA technical components.
· Design and implement App Connectors and, where applicable, a Private/Service Edge.
· Integrate Zscaler with Azure Entra ID, SCIM, Intune and SIEM platforms.
· Assess telephony impacts, bidirectional flows, bypass requirements, performance and latency constraints.
· Prepare and support migration from FortiClient VPN access to ZPA.
· Prepare and support the ZIA migration, including policy and proxy validation.
· Reverse-engineer applications accessed via VPN and define ZPA application segments.
· Support populations including Windows 11 workstations, laptops, mobile devices, external providers and relevant OT environments where applicable.
· Validate GRE tunnels, explicit proxy configurations and, where required, transparent proxy capabilities.
· Design and validate ZPA high availability, capacity and performance.
· Define SIEM log collection and event-routing strategy.
· Prepare UAT, execute the pilot migration and perform functional validation.
· Define and support phased deployment and migration.
· Identify opportunities to optimise the Zscaler tenant.
· Provide technical support during design, pilot and go-live activities.
· Conduct knowledge-transfer and training sessions for operations and support teams.
Application & Dependency Scope
The consultant will analyse applications and services currently accessed through the remote-access environment, including, but not limited to:
· SAP
· OpenScape
· Follow-Me Printing
· RDP environments
· Specific business-critical applications
The work includes identifying FQDNs, wildcard domains, application dependencies, network flows and appropriate ZPA App Segments.
Architecture & Design Scope
· ZIA architecture
· ZPA architecture
· App Connector architecture
· Optional Private/Service Edge architecture
· Azure Entra ID integration
· SCIM integration
· SIEM integration
· Intune integration
· BYOD and mobile strategy
· Telephony and bidirectional-flow impacts
· Required bypass mechanisms
· Performance and latency considerations
Expected Deliverables
· HLD – ZIA/ZPA
· LLD – ZIA/ZPA
· Technical / Detailed Architecture Document (TAD/DAT)
· Azure Architecture and Entra ID / SCIM documentation
· App Connector Design
· Service Edge Design, where applicable
· ZPA Application Catalogue
· Application Flow and Dependency Mapping
· ZIA Migration Plan
· VPN-to-ZPA Migration Plan
· Operations Guides
· Support and Troubleshooting Procedures
· Failover Procedures
· Level 1–3 Operational Documentation
· Knowledge Transfer Documentation
· Pilot Report and Recommendations
Mission Phases
1. Analysis & Scoping
2. Architecture Design
3. Documentation
4. ZIA Implementation
5. ZPA Implementation
6. Pilot / UAT
7. Migration
8. Knowledge Transfer
Mandatory Requirements
· ZDTE certification or higher.
· Minimum 5 years of professional Zscaler experience.
· Senior-level expertise in Zscaler ZIA and ZPA.
· Proven experience with a similar Zscaler migration project.
· Strong expertise in network security aspects.
· Experience creating and maintaining technical, architecture and operational documentation.
· English language proficiency: minimum B2 CEFR.
· French language proficiency: minimum B2 CEFR.
Ideal Candidate
The ideal candidate is a senior, hands-on Zscaler specialist capable of working across architecture, implementation, migration, troubleshooting and documentation. The consultant should be comfortable analysing complex application and network dependencies and translating them into a practical ZIA/ZPA Zero Trust design.
Applicant Information
This opportunity is being managed through a Vendor Neutral Managed Service Provider. Client identity and MSP contractual details have been intentionally omitted from this applicant-facing version. Candidates should not contact the end client directly during the selection process and should route questions through the recruiting channel.
Application
Please submit an updated CV highlighting relevant Zscaler ZIA/ZPA implementations, migration projects, certifications, French and English proficiency, availability from 01 September 2026, and your expected daily rate.
Work Location: Hybrid remote in Gosselies
