Senior Network Engineer – Zscaler SME

General Dynamics Information Technology • Rockville, MD

8d • Onsite

About The Position

GDIT is seeking a Senior Network Engineer with deep Zscaler expertise to support the Health Resources & Services Administration (HRSA). The role owns the design, operation, and security of HRSA’s Zscaler environment while supporting the broader enterprise LAN/WAN, firewall, and remote-access infrastructure. It is a hands-on engineering role involving direct collaboration with Project Managers, the Office of Information Security and Privacy (OISP), and desktop/server support teams.

The position is onsite five days per week in Rockville, Maryland. Candidates must be able to obtain a Public Trust, have resided in the United States for three of the last five years, and pass a public trust background investigation. The role is regular, with 40 scheduled weekly hours and no required travel. The likely salary range is $111,350–$150,650; actual compensation may vary based on experience, geographic location, and contractual requirements.

Requirements

• Bachelor’s degree or an equivalent combination of education and experience.
• At least 8 years of network engineering experience, including at least 5 years administering Zscaler ZIA, ZPA, and ZDX.
• Strong SASE architecture knowledge and demonstrated Zscaler policy expertise, including SSL inspection, URL filtering, DLP, CASB, and threat protection.
• Experience integrating Okta or another identity provider with Zscaler using SAML and SCIM.
• Strong networking fundamentals, including TCP/IP, DNS, routing and switching, IPsec VPN, and firewalls.
• Experience troubleshooting end-to-end connectivity, including PCAP analysis with Wireshark.
• Hands-on experience with Cisco switching and IOS upgrades, plus at least one enterprise firewall platform such as Cisco ASA/Firepower or Palo Alto/Panorama.
• Experience in federal or enterprise environments with strict compliance and 99.9% or higher uptime requirements; familiarity with NIST 800-53, TIC 3.0, and CISA BODs.
• Formal change-management experience and TLS certificate lifecycle management experience.
• Excellent communication, documentation, and collaboration skills.
• Ability to obtain a Public Trust and pass a public trust background investigation.
• Must have resided in the United States for three of the last five years.

Nice To Haves

• Zscaler Certified Cloud Professional (ZCCP) or Zscaler Certified Cloud Administrator (ZCCA).
• Okta Certified Professional or higher.
• Experience with Cisco ISE, RSA SecurID, SolarWinds scripting, Azure networking (NSGs), Riverbed, Grafana, or Cribl.

Responsibilities

• Administer, upgrade, and optimize Zscaler Internet Access (ZIA), Private Access (ZPA), and Digital Experience (ZDX), including releases, reporting, and security blocks.
• Create and maintain ZIA security policies covering SSL inspection, URL filtering, DLP, CASB, application control, and advanced threat protection in partnership with OISP.
• Maintain SSO integration between Zscaler and HRSA’s identity provider, Okta, including SAML attributes and SCIM provisioning.
• Conduct Zscaler Best Practices Assessments and Security Lifecycle Reviews, and recommend and implement ruleset changes as requirements evolve.
• Develop troubleshooting playbooks for Zscaler Client Connector issues and support endpoint and server teams.
• Design, implement, and maintain enterprise LAN/WAN, routing and switching, firewalls, and remote access for IPv4 and IPv6.
• Support RSA SecurID and Authentication Manager and their integration with VPN, RADIUS, and LDAP.
• Monitor network performance, lead upgrades and technology refreshes, and coordinate hardware and software procurement as needed.
• Provide ad-hoc Zscaler reports for leadership and maintain network documentation, diagrams, and standard operating procedures.

Benefits

• 401(k) with company match.
• Comprehensive health and wellness packages, including medical plan options, some with Health Savings Accounts, dental plan options, and a vision plan.
• Paid education and certifications.
• Internal mobility support.
• Cutting-edge technology and opportunities to learn.
• Full flex work weeks where possible.
• Paid time off plans, including vacation, sick and personal time, holidays, paid parental, military, bereavement, and jury duty leave.
• Short- and long-term disability benefits, life insurance, accidental death and dismemberment, personal accident, critical illness, and business travel and accident insurance.

What This Job Offers

• Job Type: Full-time
• Career Level: Senior