Senior Network Engineer - Zscaler Specialist

Job Location s: US-VA-Ashburn | US-FL-Orlando | US-VA-Springfield

Requisition :

Position Category:
Information Technology

Clearance:
Public Trust

Peraton is seeking an experienced Senior Network Engineer specializing in Zscaler cloud security platforms to support network infrastructure and security operations. This individual will serve as a subject matter expert (SME) in Zscaler technologies, leading the design, deployment, migration, and optimization of Zero Trust and Secure Access Service Edge (SASE) architectures. The Senior Network Engineer will collaborate with network, security, and cloud teams to modernize legacy security infrastructure and implement scalable, cloud based solutions that protect users, applications, and data across distributed environments.

The ideal candidate will bring extensive hands on experience with Zscaler Internet Access (ZIA) and Zscaler Private Access (ZPA), strong networking fundamentals, and demonstrated expertise in network security engineering, policy management, and enterprise security architecture.

This position requires full time, on site presence at one of the designated locations in Ashburn, VA;
Springfield, VA; or Orlando, FL.

• Architect, deploy, and manage the full Zscaler product portfolio
  :
  • Zscaler Internet Access (ZIA) - web security, SSL inspection, CASB, DLP, sandboxing, URL filtering
  • Zscaler Private Access (ZPA) - Zero Trust Network Access (ZTNA) for internal application connectivity
  • Zscaler Digital Experience (ZDX) - end-user experience monitoring and troubleshooting
  • Zscaler Posture Control / CNAPP - cloud-native application protection
• Lead migration projects from legacy VPN, on-premises proxies, and traditional perimeter firewalls to Zscaler SASE architecture
• Design and enforce ZIA security policies
  : threat prevention, SSL/TLS inspection, DNS security, cloud firewall, bandwidth controls, and data loss prevention (DLP)
• Configure and manage ZPA application segments
  , server groups, App Connectors, and access policies for Zero Trust application access
• Integrate Zscaler with identity providers (IdP):
  Azure AD/Entra , Okta, Ping Identity, and SAML/SCIM provisioning
• Deploy and manage Zscaler Client Connector (Z-App) across Windows, macOS, iOS, and Android endpoints
• Configure Zscaler forwarding methods
  : GRE/IPsec tunnels, PAC files, proxy chaining, and SD-WAN integrations
• Integrate Zscaler with SD-WAN platforms (Cisco Viptela, VMware Velo Cloud, Fortinet) for automated traffic steering
• Monitor platform health, user experience metrics, and security events through the Zscaler Admin Portal and ZDX
• Perform log analysis and threat hunting using Zscaler NSS (Nanolog Streaming Service) integrated with SIEM platforms (Splunk, Microsoft Sentinel, QRadar)
• Lead policy audits and optimization to reduce attack surface, improve performance, and ensure compliance
• Collaborate with application owners to onboard workloads into ZPA and define least-privilege access policies
• Participate in an on-call rotation to support critical Zscaler infrastructure and user connectivity incidents
• Mentor junior engineers on Zero Trust principles, SASE architecture, and Zscaler platform operations
• Maintain comprehensive documentation: architecture diagrams, policy runbooks, onboarding guides, and change records

• Bachelor's degree and 8 years of experience, a master's degree and 6 years of experience, an associate's degree and 10 years of experience, or a high school diploma or equivalent and 12 years of experience.
• Must be a U.S. Citizen and eligible to obtain the required DHS CBP clearance.
• Minimum of 5 years of hands on network engineering or network security engineering experience, including at least 2 years of dedicated Zscaler platform administration and architecture experience.
• Demonstrated hands on experience administering, configuring, and troubleshooting Zscaler Internet Access (ZIA) and Zscaler Private Access (ZPA), including security policies, application segments, App Connectors, and access controls.
• Strong understanding of Zero Trust Network Access (ZTNA), Secure Access Service Edge (SASE), SSL/TLS inspection, certificate management, and enterprise security policy enforcement.
• Strong networking fundamentals, including TCP/IP, DNS, HTTP/S, BGP, routing, firewall policies, and Zscaler traffic forwarding methods such as GRE/IPsec tunnels and PAC files.
• Working knowledge of identity federation and…