Senior Zscaler Network Engineer

We’re looking for a hands-on Senior Zscaler Network Engineer to support and scale our enterprise Zscaler Internet Access (ZIA) and Zscaler Private Access (ZPA) environment. This contractor will work closely with our Principal Network Engineer, driving Zscaler rollout, handling complex day-to-day troubleshooting, taking intake for new internal projects, and mentoring other engineers. Our stack includes ZIA, ZPA, Palo Alto firewalls, Cisco networking, and Okta.
The role is hybrid, with roughly half the time onsite at our Pleasanton HQ and half remote.

Must-have profile (quick screen bullets)

●         5+ years in enterprise network engineering (routing, switching, VPN/SD-WAN, TCP/IP, DNS, HTTP/S).
●         Strong hands-on experience with Zscaler ZIA and ZPA in production (design, rollout, support, troubleshooting).
●         Current Zscaler certification (Associate/Professional/Architect or equivalent).
●         Proven integration experience with Palo Alto firewalls, Cisco network infrastructure, and Okta for identity/SSO and group-based policy.
●         Strong troubleshooting skills across end-to-end flows (client, Cisco network, Palo Alto, Zscaler, app), including logs and packet captures.
●         Experience mentoring junior/peer engineers and working closely with a Principal/Lead engineer.
●         Excellent communication skills for partnering with internal project teams and taking
intake for new Zscaler-related projects.

Nice to have

●         Scripting/automation (Python, Ansible, Terraform or similar) for network/security workflows.
●         Experience in hybrid/multi-cloud and/or regulated, security-sensitive environments.