Job Details

Job Description:
As a ZPA Network Engineer, you will support the design, implementation, and operationalization of Zscaler Private Access as part of a Zero Trust Network Access strategy. This role is hands-on and network-focused, responsible for enabling secure, policy-driven access to private applications while transitioning legacy VPN-based connectivity models into scalable Zero Trust access patterns. You will work closely with network, security, identity, and application teams to ensure solutions are secure, auditable, and operationally sustainable.
Key Responsibilities:

• Design, implement, and maintain Zscaler Private Access connectivity including App Connectors, Server Groups, Application Segments, and access policies.
• Collaborate with network, security, identity, and application stakeholders to enable secure access to internal applications using ZPA.
• Analyze legacy network and VPN-based access models and translate them into application-level Zero Trust access designs.
• Support application onboarding to ZPA by validating network paths, ports, protocols, and dependencies.
• Configure and maintain least-privilege ZPA access policies while minimizing disruption to critical operations.
• Troubleshoot ZPA access issues including user connectivity, application reachability, connector health, and routing problems.
• Participate in migration efforts to transition users and applications from legacy access methods to ZPA.
• Ensure ZPA configurations are documented, auditable, and aligned with security and compliance requirements.
• Develop and maintain technical documentation including standards, procedures, diagrams, and operational runbooks.
• Engage with vendors and support teams to resolve complex issues and optimize platform stability.

Required Skills, Experiences, Education, and Competencies:

• Strong experience with enterprise networking including routing, firewalling, DNS, and traffic flow analysis.
• Hands-on experience implementing and supporting Zscaler Private Access or similar Zero Trust access platforms.
• Strong understanding of Zero Trust Network Access concepts and application-level segmentation.
• Ability to assess complex legacy network environments and design scalable access models.
• Experience working in regulated or compliance-driven environments.
• Strong documentation, communication, and cross-functional collaboration skills.
• Ability to balance security controls with operational requirements for private application access.

Preferred Qualifications:

• Zscaler certifications or formal training related to ZPA.
• Industry certifications such as CCNP, Security+, CySA+, or equivalent.
• Experience supporting large enterprise or multi-organization environments.
• Familiarity with security and regulatory frameworks such as NIST 800-53 or similar standards.
• Experience supporting enterprise access modernization initiatives.

The hourly range for roles of this nature are $40.00 to $80.00/hr. Rates are heavily dependent on skills, experience, location, and industry.

cyberThink is an Equal Opportunity Employer.