Senior Network Engineer – Zscaler Specialist

Peraton Overview Peraton is a next-generation national security company that drives missions of consequence spanning the globe and extending to the farthest reaches of the galaxy. As the world’s leading mission capability integrator and transformative enterprise IT provider, we deliver trusted, highly differentiated solutions and technologies to protect our nation and allies. Peraton operates at the critical nexus between traditional and nontraditional threats across all domains: land, sea, space, air, and cyberspace.

The company serves as a valued partner to essential government agencies and supports every branch of the U.S. armed forces. Each day, our employees do the can’t be done by solving the most daunting challenges facing our customers. Visit  to learn how we’re keeping people around the world safe and secure.

Responsibilities Peraton is seeking an experienced Senior Network Engineer specializing in Zscaler cloud security platforms to support enterprise network security and infrastructure modernization initiatives. This individual will serve as a subject matter expert (SME) in Zscaler technologies, leading the design, deployment, migration, and optimization of Zero Trust and Secure Access Service Edge (SASE) architectures. The Senior Network Engineer will collaborate with network, security, and cloud teams to modernize legacy security infrastructure and implement scalable, cloud based solutions that protect users, applications, and data across distributed environments.

The ideal candidate will bring hands on experience with Zscaler Internet Access (ZIA) and Zscaler Private Access (ZPA), strong networking fundamentals, and expertise in cloud security policy management, identity integration, and enterprise network security.

This position requires full time, on site presence at one of the designated locations in Ashburn, VA;
Springfield, VA; or Orlando, FL.Day to Day

Roles and Responsibilities:

Zscaler Architecture & Platform Management Design, deploy, configure, and maintain Zscaler solutions, with a primary focus on Zscaler Internet Access (ZIA) and Zscaler Private Access (ZPA).Support additional Zscaler capabilities, including Zscaler Digital Experience (ZDX) and cloud native application protection, as required.

Lead migrations from legacy VPNs, on premises proxies, and traditional perimeter security solutions to Zscaler cloud security architectures.

Deploy and manage Zscaler Client Connector across supported endpoint platforms.

Maintain architecture diagrams, configuration documentation, policy runbooks, onboarding guides, and change records.

Zero Trust & Security Policy Management Implement and optimize Zero Trust Network Access (ZTNA) and Secure Access Service Edge (SASE) solutions to protect enterprise applications, users, and data.

Configure ZIA security policies, including URL filtering, threat prevention, SSL/TLS inspection, DNS security, cloud application controls, and data loss prevention (DLP).Configure and manage ZPA application segments, App Connectors, server groups, and access policies to enforce least privilege access.

Manage certificate configurations, inspection policies, and appropriate security bypass rules.

Conduct policy audits and optimization activities to reduce the attack surface, improve performance, and support compliance requirements.

Identity & Network Integration Integrate Zscaler with identity providers, including Microsoft Entra , Okta, and Ping Identity, using SAML and SCIM provisioning.

Configure Zscaler traffic forwarding methods, including GRE and IPsec tunnels, PAC files, and proxy chaining.

Integrate Zscaler with SD WAN platforms, including Cisco Viptela, VMware Velo Cloud, and Fortinet, to support secure traffic steering.

Collaborate with application…