Senior Network Engineer – Zscaler Specialist

Peraton • Orlando, FL

1d • $135,000 - $216,000 • Onsite

About The Position

Peraton is seeking an experienced Senior Network Engineer specializing in Zscaler cloud security platforms to support enterprise network security and infrastructure modernization initiatives. The role serves as a subject matter expert in Zscaler technologies and leads the design, deployment, migration, and optimization of Zero Trust and Secure Access Service Edge (SASE) architectures. The engineer collaborates with network, security, and cloud teams to modernize legacy security infrastructure and implement scalable cloud-based solutions that protect users, applications, and data across distributed environments.

The position focuses on hands-on administration of Zscaler Internet Access (ZIA) and Zscaler Private Access (ZPA), along with cloud security policy management, identity integration, and enterprise network security. It is full-time and requires on-site presence at one of the designated locations: Ashburn, Virginia; Springfield, Virginia; or Orlando, Florida. Participation in an on-call rotation is required to support critical Zscaler infrastructure and user connectivity incidents.

Requirements

• Bachelor's degree and 8 years of experience, master's degree and 6 years, associate's degree and 10 years, or high school diploma or equivalent and 12 years.
• Must be a U.S. citizen and eligible to obtain the required DHS CBP clearance.
• At least 5 years of hands-on network engineering or network security engineering experience, including at least 2 years dedicated to Zscaler platform administration and architecture.
• Hands-on experience configuring, administering, and troubleshooting ZIA and ZPA.
• Strong understanding of ZTNA, SASE, and enterprise cloud security architectures.
• Experience configuring ZIA security policies, SSL/TLS inspection, certificate management, and threat prevention controls.
• Experience configuring ZPA App Connectors, application segments, and policy-based access controls.
• Working knowledge of identity federation and provisioning technologies, including SAML 2.0, SCIM, Microsoft Entra ID, or Okta.
• Strong networking fundamentals, including TCP/IP, DNS, HTTP/S, BGP, routing, firewall policies, and Zscaler traffic forwarding methods.
• Strong analytical, troubleshooting, documentation, and communication skills, including the ability to resolve complex connectivity and security issues.

Nice To Haves

• Experience supporting federal government, defense, or other regulated environments.
• An active DHS Public Trust or Top Secret security clearance or higher.
• Active CCNP certification; CCNP Security is preferred, and CCNP Enterprise is acceptable.
• Zscaler Certified Professional (ZCP) certification in ZIA and/or ZPA; ZCE or ZCA certification is also desirable.
• Experience with ZDX, Zscaler Posture Control, or cloud-native application protection capabilities.
• Experience integrating Zscaler NSS with SIEM platforms such as Splunk, Microsoft Sentinel, or IBM QRadar.
• Experience integrating Zscaler with SD-WAN platforms such as Cisco Viptela, VMware VeloCloud, or Fortinet.
• Experience deploying Zscaler solutions across AWS, Microsoft Azure, or Google Cloud Platform.
• Knowledge of NIST SP 800-53, FedRAMP, PCI DSS, HIPAA, or DoD Security Technical Implementation Guides (STIGs).
• Experience with scripting and automation using Python, Ansible, Terraform, or Zscaler APIs.
• Experience supporting large-scale Zscaler deployments across thousands of users or multiple geographic regions.
• Familiarity with Palo Alto Prisma Access or other SASE platforms.
• Bachelor's degree in Computer Science, Information Technology, Cybersecurity, Network Engineering, or a related field; equivalent combinations of education, training, and professional certifications will be considered.
• Additional certifications such as Palo Alto PCNSE, CCIE Security, CompTIA Security+, AWS or Azure Security Specialty, or Certified Cloud Security Professional (CCSP).

Responsibilities

• Design, deploy, configure, and maintain Zscaler solutions, primarily ZIA and ZPA; support ZDX and cloud-native application protection capabilities as required.
• Lead migrations from legacy VPNs, on-premises proxies, and traditional perimeter security solutions to Zscaler cloud security architectures.
• Deploy and manage Zscaler Client Connector across supported endpoint platforms.
• Maintain architecture diagrams, configuration documentation, policy runbooks, onboarding guides, and change records.
• Implement and optimize ZTNA and SASE solutions to protect enterprise applications, users, and data.
• Configure ZIA policies for URL filtering, threat prevention, SSL/TLS inspection, DNS security, cloud application controls, and data loss prevention.
• Configure and manage ZPA application segments, App Connectors, server groups, and access policies to enforce least-privilege access.
• Manage certificate configurations, inspection policies, and security bypass rules.
• Conduct policy audits and optimization to reduce attack surfaces, improve performance, and support compliance requirements.
• Integrate Zscaler with identity providers such as Microsoft Entra ID, Okta, and Ping Identity using SAML and SCIM provisioning.
• Configure traffic forwarding methods, including GRE and IPsec tunnels, PAC files, and proxy chaining.
• Integrate Zscaler with SD-WAN platforms such as Cisco Viptela, VMware VeloCloud, and Fortinet to support secure traffic steering.
• Collaborate with application owners to onboard workloads into ZPA and establish access controls.
• Monitor platform health, user experience, connectivity, and security events using the Zscaler Admin Portal and ZDX.
• Analyze logs and investigate potential threats using Zscaler NSS and SIEM platforms such as Splunk, Microsoft Sentinel, and IBM QRadar.
• Troubleshoot complex connectivity, application access, and security policy enforcement issues.
• Participate in an on-call rotation for critical Zscaler infrastructure and user connectivity incidents.
• Collaborate with network, security, and cloud teams to resolve incidents and maintain reliable service delivery.
• Mentor junior engineers on Zero Trust principles, SASE architecture, Zscaler administration, and network security practices.
• Maintain technical documentation, operational procedures, and troubleshooting guides.
• Identify opportunities to improve security controls, platform performance, and operational efficiency.
• Communicate technical issues, risks, and recommended solutions to engineering teams and stakeholders.

What This Job Offers

• Job Type: Full-time
• Career Level: Senior
• Education Level: High school or GED