Senior Network Engineer – Zscaler Specialist
Peraton · Ashburn, VA, US
About this role
## Senior Network Engineer – Zscaler Specialist ### Responsibilities - Serve as a **Zscaler subject matter expert (SME)** supporting enterprise network security and modernization initiatives. - **Design, deploy, migrate, and optimize** **Zero Trust** and **SASE** architectures. - Lead migrations from **legacy VPNs**, **on-prem proxies**, and traditional perimeter security to **Zscaler cloud security**. ### Day-to-Day - **Zscaler Architecture & Platform Management** - Design, deploy, configure, and maintain **Zscaler Internet Access (ZIA)** and **Zscaler Private Access (ZPA)**. - Support additional capabilities such as **Zscaler Digital Experience (ZDX)** and cloud-native application protection. - Deploy and manage **Zscaler Client Connector** across supported endpoint platforms. - Maintain **architecture diagrams**, configuration documentation, **policy runbooks**, onboarding guides, and **change records**. - **Zero Trust & Security Policy Management** - Implement and optimize **ZTNA** and **SASE** solutions. - Configure **ZIA security policies** (e.g., URL filtering, threat prevention, SSL/TLS inspection, DNS security, cloud app controls, **DLP**). - Configure and manage **ZPA** (app segments, **App Connectors**, server groups, access policies) to enforce **least privilege**. - Manage certificates, inspection policies, and security bypass rules. - Perform policy audits/optimization to reduce attack surface, improve performance, and support compliance. - **Identity & Network Integration** - Integrate Zscaler with identity providers such as **Microsoft Entra ID**, **Okta**, and **Ping Identity** using **SAML** and **SCIM**. - Configure traffic forwarding methods (e.g., **GRE/IPsec tunnels**, PAC files, proxy chaining). - Integrate with **SD-WAN** platforms (e.g., **Cisco Viptela**, **VMware VeloCloud**, **Fortinet**) for secure traffic steering. - Coordinate with application owners to onboard workloads into **ZPA** and establish access controls. - **Monitoring, Troubleshooting & Incident Response** - Monitor platform health, user experience, connectivity, and security events via the **Zscaler Admin Portal** and **ZDX**. - Investigate threats using **Zscaler Nanolog Streaming Service (NSS)** and SIEM tools such as **Splunk**, **Microsoft Sentinel**, and **IBM QRadar**. - Troubleshoot complex connectivity, application access, and security policy enforcement issues. ### Location / Work Setting - **Full-time, on-site** at one of the designated locations: **Ashburn, VA; Springfield, VA; or Orlando, FL**.
Listing freshness
CronJobs last confirmed this listing 2h ago. If its source stops confirming the opening for seven days, this page is removed from active inventory.