Network Security Engineer - Zscaler Private Access (ZPA) Rollout

Overview

Full-Time

Experience Level: 5-8 years

Department: Network Security / Infrastructure Engineering

Role Overview

We are looking for an experienced Network Security Engineer

to lead the rollout of Zscaler Private Access (ZPA) across multiple

regions and subsidiaries. The role involves designing and implementing ZPA

configurations, deploying connectors in security zones, creating security

policies, troubleshooting issues during rollout, and providing expert

consulting on ZPA best practices.

Key Responsibilities

• ZPA Configuration & Deployment
• Design and implement ZPA configurations aligned with organizational security standards.
• Deploy and configure ZPA connectors in designated security zones and national subsidiaries.
• Ensure proper integration with identity providers (IdP) and application segments.
• Security Policy Creation
• Develop and maintain ZPA security policies for application access control.
• Define granular access rules based on user roles, device posture, and application sensitivity.
• Implement governance controls for policy changes and maintain audit-ready documentation.
• Rollout Support & Troubleshooting
• Perform error analysis and troubleshooting during ZPA rollout phases.
• Resolve connectivity issues between users, connectors, and applications.
• Collaborate with cross-functional teams (Network, IAM, Security) to ensure smooth deployment.
• Consulting & Best Practices
• Provide technical consulting on ZPA architecture, design, and operational best practices.
• Advise on zero-trust principles and secure remote access strategies.
• Conduct knowledge transfer sessions and create detailed documentation for operations teams.
  

• Strong hands-on experience with Zscaler Private Access (ZPA) deployment and configuration.
• Knowledge of zero-trust architecture, identity-based access, and secure application segmentation.
• Familiarity with networking fundamentals (TCP/IP, DNS, HTTP/HTTPS) and VPN alternatives.
• Experience with connector deployment on virtualized environments (VMware, Hyper-V, cloud platforms).
• Proficiency in troubleshooting ZPA connectivity issues and analyzing logs.
• Excellent communication and documentation skills.
  
  

• Zscaler certifications (e.g., Zscaler Certified Administrator - ZPA).
• Experience integrating ZPA with identity providers (Okta, Azure AD, Ping).
• Knowledge of automation scripting (Python, PowerShell) for ZPA configuration.
• Background in large-scale rollouts across multiple geographies.
  
  

Soft Skills

• Strong problem-solving and analytical skills.
• Ability to work independently and manage multiple priorities.
• Collaborative mindset for working with global teams.
  
  

network security,zscaler private access (zpa),zpa configuration,zpa connectors,