Senior Zscaler Security Engineer

Join CPKC North Americas first transnational railroad connecting U.S. Canada and Mexico where your career drives progress and safety is paramount. We connect communities fuel economic growth and provide meaningful work in a culture that values diversity accountability and pride. With opportunities for training development and advancement youre not just building a careeryoure part of something bigger. Together we move goods connect people and create lasting change. Your future starts here.

PURPOSE OF THE POSITION:

We are seeking a Senior Zscaler Security Engineer to spearhead the evolution of CPKCs Zero Trust security strategy. As the subject matter expert for ZIA ZPA and ZDX you will architect and automate next-generation secure access solutions drive cloud and network security innovation and help shape the future of enterprise cybersecurity. Partnering across Infrastructure Cloud IAM Security and DevOps teams you will deliver scalable resilient and seamless security experiences that enable the business to move faster and more securely.

POSITION ACCOUNTABILITIES:

• Lead the architecture deployment and optimization of Zscaler solutions including ZIA ZPA ZDX CASB DLP and Cloud Firewall
• Design and implement Zero Trust and SASE strategies that enable secure seamless access across the enterprise
• Develop and automate Zscaler configurations policies and operational workflows using APIs Python and PowerShell
• Build and manage Infrastructure as Code (Terraform) solutions with robust version control and governance practices
• Create self-service tools and automation that reduce manual effort increase consistency and improve operational efficiency
• Establish and maintain CI/CD pipelines to automate testing validation deployment and rollback of security configurations
• Troubleshoot complex security network and automation issues across cloud proxy authentication and access environments
• Drive security posture improvements through assessments policy optimization compliance reporting and operational metrics
• Partner with Infrastructure Cloud IAM DevOps and SOC teams to deliver secure scalable and resilient access solutions
• Mentor engineers on automation scripting infrastructure as code and security best practices to build enterprise-wide capability

POSITION REQUIREMENTS:

• Bachelors degree in Cybersecurity Information Technology Computer Science Software Engineering or equivalent experience.
• 5 years of cybersecurity network security cloud security or platform engineering experience including 3 years administering and implementing Zscaler solutions (ZIA ZPA ZDX).
• Strong expertise in Zero Trust SASE/SSE cloud security IAM networking SSL/TLS and enterprise access technologies.
• Hands-on experience with APIs Python/PowerShell automation Terraform Git and CI/CD with the ability to translate business and security requirements into scalable automated solutions.

WHAT CPKC HAS TO OFFER:

• Flexible and competitive benefits package
• Competitive company pension and/or retirement plans
• Employee share purchase plan
• Performance incentive
• Annual fitness subsidy
• Part-time studies program

PRE-EMPLOYMENT REQUIREMENTS:

Background Investigation

• Criminal history check
• Education verification
• Professional references

BECOMING A RAILROADER:

As an employee with a North American presence the possibility does exist that the location of your position may be changed based on organizational requirements.

Management Conductor Program

Becoming a qualified conductor or locomotive engineer is the single best way for a management employee to learn the business at CPKC. You may be required to obtain a certification or to maintain your current certification/qualification as a conductor or locomotive engineer.

CULTURE OF INCLUSION:

For our U.S. applicants CPKC is an equal opportunity/affirmative action employer inclusive of protected veterans and individuals with disabilities. For Canadian applicants CPKC is an employment equity employer committed to the principles of employment equity and inclusion. We encourage all qualified candidates to apply including: women Black Indigenous People of Color (BIPOC) members of the LGBTQ community and people with disabilities. Accommodations for the job application process can be provided as appropriate upon request. All applicant information will be managed in accordance with the federal Personal Information Protection and Electronic Documents Act (PIPEDA).

• Req ID: 106304
• Department: Information Services & Network Service Centre (NSC)
• Job Type: Full-Time
• Position Type: Non-Union
• Location: Calgary Alberta
• Country: Canada
• % of Travel: 0-10%
• # of Positions: 1
• Job Grade: 4
• Job Available to: Internal & External

#LI-ONSITE

#LI-HN2