Senior Network Engineer – Zscaler SME

General Dynamics Information Technology • Rockville, MD

1d • $111,350 - $150,650 • Onsite

About The Position

GDIT is seeking a Senior Network Engineer with deep Zscaler expertise to support the Health Resources & Services Administration (HRSA). The role owns the design, operation, and security of HRSA’s Zscaler environment while supporting enterprise LAN/WAN, firewall, and remote-access infrastructure. It is a hands-on engineering position working with Project Managers, the Office of Information Security and Privacy (OISP), and desktop and server support teams.

The engineer administers and optimizes Zscaler Internet Access (ZIA), Private Access (ZPA), and Digital Experience (ZDX), maintains security policies and identity-provider integrations, and conducts security reviews. The role also supports enterprise networking and RSA SecurID, monitors network performance, coordinates upgrades and procurement, and provides reporting and documentation.

The position is onsite five days per week in Rockville, Maryland, with 40 scheduled hours weekly and no required travel. Candidates must be able to obtain a Public Trust, have resided in the United States for three of the last five years, and pass a public trust background investigation. U.S. citizenship is not required. The listed likely salary range is $111,350–$150,650, with actual compensation determined by experience, location, and possible contractual requirements.

Requirements

• Bachelor’s degree or equivalent combination of education and experience.
• 8+ years of network engineering experience, including 5+ years hands-on administering Zscaler (ZIA, ZPA, ZDX).
• Strong SASE architecture knowledge and proven Zscaler policy expertise, including SSL inspection, URL filtering, DLP, CASB, and threat protection.
• Experience integrating Okta or another identity provider with Zscaler via SAML/SCIM.
• Strong networking fundamentals, including TCP/IP, DNS, routing/switching, IPsec VPN, and firewalls, plus end-to-end connectivity troubleshooting, including PCAP analysis with Wireshark.
• Hands-on experience with Cisco switching/IOS upgrades and at least one enterprise firewall platform: Cisco ASA/Firepower or Palo Alto/Panorama.
• Experience in federal or enterprise environments with strict compliance and 99.9%+ uptime requirements; familiarity with NIST 800-53, TIC 3.0, and CISA BODs.
• Formal change-management experience and TLS certificate lifecycle management.
• Excellent communication, documentation, and collaboration skills.
• Ability to obtain a Public Trust; must have resided in the U.S. for 3 of the last 5 years and pass a public trust background investigation.

Nice To Haves

• Zscaler Certified Cloud Professional (ZCCP) or Zscaler Certified Cloud Administrator (ZCCA).
• Okta Certified Professional or higher.
• Cisco ISE, RSA SecurID, SolarWinds scripting, Azure networking (NSGs), Riverbed, Grafana, or Cribl.

Responsibilities

• Administer, upgrade, and optimize Zscaler Internet Access (ZIA), Private Access (ZPA), and Digital Experience (ZDX), including releases, reporting, and security blocks.
• Create and maintain ZIA security policies for SSL inspection, URL filtering, DLP, CASB, application control, and advanced threat protection in partnership with OISP.
• Maintain SSO integration between Zscaler and HRSA’s identity provider (Okta), including SAML attributes and SCIM provisioning.
• Conduct Zscaler Best Practices Assessments and Security Lifecycle Reviews; recommend and implement ruleset changes as security and networking requirements evolve.
• Develop troubleshooting playbooks for Zscaler Client Connector issues and support endpoint and server teams.
• Design, implement, and maintain enterprise LAN/WAN, routing and switching, firewalls, and remote access for IPv4/IPv6.
• Support RSA SecurID / Authentication Manager and its integration with VPN, RADIUS, and LDAP.
• Monitor network performance, lead upgrades and technology refreshes, and coordinate hardware/software procurement as needed.
• Deliver ad-hoc Zscaler reports for leadership and maintain network documentation, diagrams, and SOPs.

Benefits

• 401(k) with company match.
• Comprehensive health and wellness packages, including medical plan options, some with Health Savings Accounts, dental plans, and a vision plan.
• Paid education and certifications.
• Internal mobility support.
• Cutting-edge technology to learn from.
• Full flex work weeks where possible.
• Paid time off plans, including vacation, sick and personal time, holidays, paid parental, military, bereavement, and jury duty leave.
• Short- and long-term disability benefits, life insurance, accidental death and dismemberment, personal accident, critical illness, and business travel and accident insurance.

What This Job Offers

• Job Type: Full-time
• Career Level: Senior