Join CPKC, North America's first transnational railroad connecting U.S., Canada, and Mexico, where your career drives progress and safety is paramount. We connect communities, fuel economic growth, and provide meaningful work in a culture that values diversity, accountability, and pride. With opportunities for training, development, and advancement, you're not just building a career—you're part of something bigger. Together, we move goods, connect people, and create lasting change. Your future starts here.PURPOSE OF THE POSITION:We are seeking a Senior Zscaler Security Engineer to spearhead the evolution of CPKC's Zero Trust security strategy. As the subject matter expert for ZIA, ZPA, and ZDX, you will architect and automate next‐generation secure access solutions, drive cloud and network security innovation, and help shape the future of enterprise cybersecurity. Partnering across Infrastructure, Cloud, IAM, Security, and DevOps teams, you will deliver scalable, resilient, and seamless security experiences that enable the business to move faster and more securely.POSITION ACCOUNTABILITIES:Lead the architecture, deployment, and optimization of Zscaler solutions, including ZIA, ZPA, ZDX, CASB, DLP, and Cloud FirewallDesign and implement Zero Trust and SASE strategies that enable secure, seamless access across the enterpriseDevelop and automate Zscaler configurations, policies, and operational workflows using APIs, Python, and PowerShellBuild and manage Infrastructure as Code (Terraform) solutions with robust version control and governance practicesCreate self‐service tools and automation that reduce manual effort, increase consistency,



and improve operational efficiencyEstablish and maintain CI/CD pipelines to automate testing, validation, deployment, and rollback of security configurationsTroubleshoot complex security, network, and automation issues across cloud, proxy, authentication, and access environmentsDrive security posture improvements through assessments, policy optimization, compliance reporting, and operational metricsPartner with Infrastructure, Cloud, IAM, DevOps, and SOC teams to deliver secure, scalable, and resilient access solutionsMentor engineers on automation, scripting, infrastructure as code, and security best practices to build enterprise‐wide capabilityPOSITION REQUIREMENTS:Bachelor's degree in Cybersecurity, Information Technology, Computer Science, Software Engineering, or equivalent experience.5+ years of cybersecurity, network security, cloud security, or platform engineering experience, including 3+ years administering and implementing Zscaler solutions (ZIA, ZPA, ZDX).Robust expertise in Zero Trust, SASE/SSE, cloud security, IAM, networking, SSL/TLS, and enterprise access technologies.Hands‐on experience with APIs, Python/PowerShell automation, Terraform, Git, and CI/CD,



with the ability to translate business and security requirements into scalable, automated solutions.WHAT CPKC HAS TO OFFER:Flexible and competitive benefits packageCompetitive company pension and/or retirement plansEmployee share purchase planPerformance incentiveAnnual fitness subsidyPRE-EMPLOYMENT REQUIREMENTS:Criminal history checkEducation verificationProfessional referencesBECOMING A RAILROADER:As an employee with a North American presence, the possibility does exist that the location of your position may be changed based on organizational requirements.Management Conductor ProgramBecoming a qualified conductor or locomotive engineer is the single best way for a management employee to learn the business at CPKC. You may be required to obtain a certification or to maintain your current certification/qualification as a conductor or locomotive engineer.CULTURE OF INCLUSION:For our U.S. applicants, CPKC is an equal opportunity/affirmative action employer, inclusive of protected veterans and individuals with disabilities. For Canadian applicants CPKC is an employment equity employer committed to the principles of employment equity and inclusion. We encourage all qualified candidates to apply including: women, Black, Indigenous, People of Color (BIPOC), members of the LGBTQ+ community and people with disabilities. Accommodations for the job application process can be provided, as appropriate, upon request. All applicant information will be managed in accordance with the federal Personal Information Protection and Electronic Documents Act (PIPEDA). #J-18808-Ljbffr

📌 Senior Zscaler Security Engineer (Calgary)
🏢 Canadian Pacific Railway
📍 Calgary