Senior Network Engineer - Zscaler Specialist

Peraton Overview

Peraton is a next-generation national security company that drives missions of consequence spanning the globe and extending to the farthest reaches of the galaxy. As the world’s leading mission capability integrator and transformative enterprise IT provider, we deliver trusted, highly differentiated solutions and technologies to protect our nation and allies. Peraton operates at the critical nexus between traditional and nontraditional threats across all domains: land, sea, space, air, and cyberspace. The company serves as a valued partner to essential government agencies and supports every branch of the U.S. armed forces. Each day, our employees do the can’t be done by solving the most daunting challenges facing our customers. Visit peraton.com to learn how we’re keeping people around the world safe and secure.

Responsibilities

Peraton is seeking an experienced Senior Network Engineer specializing in Zscaler cloud security platforms to support enterprise network security and infrastructure modernization initiatives. This individual will serve as a subject matter expert (SME) in Zscaler technologies, leading the design, deployment, migration, and optimization of Zero Trust and Secure Access Service Edge (SASE) architectures. The Senior Network Engineer will collaborate with network, security, and cloud teams to modernize legacy security infrastructure and implement scalable, cloud based solutions that protect users, applications, and data across distributed environments.

The ideal candidate will bring hands on experience with Zscaler Internet Access (ZIA) and Zscaler Private Access (ZPA), strong networking fundamentals, and expertise in cloud security policy management, identity integration, and enterprise network security.

This position requires full time, on site presence at one of the designated locations in Ashburn, VA; Springfield, VA; or Orlando, FL.

Day to Day Roles and Responsibilities:

Zscaler Architecture & Platform Management

• Design, deploy, configure, and maintain Zscaler solutions, with a primary focus on Zscaler Internet Access (ZIA) and Zscaler Private Access (ZPA).

• Support additional Zscaler capabilities, including Zscaler Digital Experience (ZDX) and cloud native application protection, as required.

• Lead migrations from legacy VPNs, on premises proxies, and traditional perimeter security solutions to Zscaler cloud security architectures.

• Deploy and manage Zscaler Client Connector across supported endpoint platforms.

• Maintain architecture diagrams, configuration documentation, policy runbooks, onboarding guides, and change records.

Zero Trust & Security Policy Management

• Implement and optimize Zero Trust Network Access (ZTNA) and Secure Access Service Edge (SASE) solutions to protect enterprise applications, users, and data.

• Configure ZIA security policies, including URL filtering, threat prevention, SSL/TLS inspection, DNS security, cloud application controls, and data loss prevention (DLP).

• Configure and manage ZPA application segments, App Connectors, server groups, and access policies to enforce least privilege access.

• Manage certificate configurations, inspection policies, and appropriate security bypass rules.

• Conduct policy audits and optimization activities to reduce the attack surface, improve performance, and support compliance requirements.

Identity & Network Integration

• Integrate Zscaler with identity providers, including Microsoft Entra ID, Okta, and Ping Identity, using SAML and SCIM provisioning.

• Configure Zscaler traffic forwarding methods, including GRE and IPsec tunnels, PAC files, and proxy chaining.

• Integrate Zscaler with SD WAN platforms, including Cisco Viptela, VMware VeloCloud, and Fortinet, to support secure traffic steering.

• Collaborate with application owners to onboard workloads into ZPA and establish appropriate access controls.

Monitoring, Troubleshooting & Incident Response

• Monitor platform health, user experience, connectivity, and security events using the Zscaler Admin Portal and ZDX.

• Analyze logs and investigate potential threats using Zscaler Nanolog Streaming Service (NSS) and integrated security information and event management (SIEM) platforms, including Splunk, Microsoft Sentinel, and IBM QRadar.

• Troubleshoot complex connectivity, application access, and security policy enforcement issues.

• Participate in an on call rotation to support critical Zscaler infrastructure and user connectivity incidents.

• Collaborate with network, security, and cloud teams to resolve incidents and maintain reliable service delivery.

Technical Leadership & Continuous Improvement

• Mentor junior engineers on Zero Trust principles, SASE architecture, Zscaler administration, and network security best practices.

• Maintain technical documentation, operational procedures, and troubleshooting guides.

• Identify opportunities to improve security controls, platform performance, and operational efficiency.

• Communicate technical issues, risks, and recommended solutions to engineering teams and stakeholders.

Qualifications

Basic Qualifications:

• Bachelor's degree and 8 years of experience, a master's degree and 6 years of experience, an associate's degree and 10 years of experience, or a high school diploma or equivalent and 12 years of experience.

• Must be a U.S. Citizen and eligible to obtain the required DHS CBP clearance.

• Minimum of 5 years of hands on network engineering or network security engineering experience, including at least 2 years dedicated to Zscaler platform administration and architecture.

• Demonstrated hands on experience configuring, administering, and troubleshooting Zscaler Internet Access (ZIA) and Zscaler Private Access (ZPA).

• Strong understanding of Zero Trust Network Access (ZTNA), Secure Access Service Edge (SASE), and enterprise cloud security architectures.

• Experience configuring ZIA security policies, SSL/TLS inspection, certificate management, and threat prevention controls.

• Experience configuring ZPA App Connectors, application segments, and policy based access controls.

• Working knowledge of identity federation and provisioning technologies, including SAML 2.0, SCIM, Microsoft Entra ID, or Okta.

• Strong networking fundamentals, including TCP/IP, DNS, HTTP/S, BGP, routing, firewall policies, and Zscaler traffic forwarding methods.

• Strong analytical, troubleshooting, documentation, and communication skills, with the ability to resolve complex connectivity and security issues.

Preferred Qualifications:

• Experience supporting federal government, defense, or other regulated environments.

• An active DHS Public Trust or Top Secret security clearance or higher is preferred.

• Active Cisco Certified Network Professional (CCNP) certification. CCNP Security is preferred, and CCNP Enterprise is acceptable.

• Zscaler Certified Professional (ZCP) certification in ZIA and/or ZPA. Zscaler Certified Engineer (ZCE) or Zscaler Certified Architect (ZCA) certification is also desirable.

• Experience with Zscaler Digital Experience (ZDX) or Zscaler Posture Control and cloud native application protection capabilities.

• Experience integrating Zscaler NSS with SIEM platforms, including Splunk, Microsoft Sentinel, or IBM QRadar.

• Experience integrating Zscaler with SD WAN platforms, including Cisco Viptela, VMware VeloCloud, or Fortinet.

• Experience deploying Zscaler solutions across AWS, Microsoft Azure, or Google Cloud Platform environments.

• Knowledge of security and compliance frameworks, including NIST SP 800 53, FedRAMP, PCI DSS, HIPAA, or DoD Security Technical Implementation Guides (STIGs).

• Experience with scripting and automation using Python, Ansible, Terraform, or Zscaler APIs.

• Experience supporting large scale Zscaler deployments across thousands of users or multiple geographic regions.

• Familiarity with Palo Alto Prisma Access or other SASE platforms.

• Bachelor's degree in Computer Science, Information Technology, Cybersecurity, Network Engineering, or a related field. Equivalent combinations of education, training, and professional certifications will be considered.

• Additional certifications such as Palo Alto PCNSE, CCIE Security, CompTIA Security+, AWS or Azure Security Specialty, or Certified Cloud Security Professional (CCSP).

Target Salary Range

$135,000 - $216,000. This represents the typical salary range for this position. Salary is determined by various factors, including but not limited to, the scope and responsibilities of the position, the individual’s experience, education, knowledge, skills, and competencies, as well as geographic location and business and contract considerations. Depending on the position, employees may be eligible for overtime, shift differential, and a discretionary bonus in addition to base pay.

Benefits Statement

Peraton offers eligible employees a variety of benefits including medical, dental, vision, life, health savings account, short/long term disability, EAP, parental leave, 401(k), paid time off (PTO) for vacation, and company paid holidays. A full listing of available benefits can be viewed at https://www.careers.peraton.com/benefits.

Application Statements

The application period for the job is estimated to be 30 days from the job posting date. However, this timeline may be shortened or extended depending on business needs and the availability of qualified candidates. By applying to this job, you are expressing interest in the role and the Company. During the review of your application, you may be required to participate in an on-camera interview, as well as participate in a process to verify your identity. Use of artificial intelligence (AI) tools of any kind during Peraton interviews is strictly prohibited unless the candidate has obtained prior written authorization. All interview responses must be the candidate’s own.

EEO

EEO: Equal opportunity employer, including disability and protected veterans, or other characteristics protected by law.