Zpa Network Engineer

Job Title: Zscaler Private Access (ZPA) Network Engineer
Location: PA (Onsite)
Job Type: Contract

Role Summary:
The Commonwealth is seeking a Zscaler Private Access (ZPA) Network Engineer to support the secure deployment and operationalization of Zscaler Private Access as a key component of the Commonwealth’s Zero Trust Network Access (ZTNA) strategy. This role will focus on designing, implementing, and supporting network connectivity and access paths for private applications using ZPA, while translating existing network access models and legacy VPN-based connectivity into scalable, policy-driven access patterns aligned with Zero Trust principles. The position is network-focused and hands-on, supporting application access enablement while ensuring solutions are secure, auditable, and operationally sustainable across the Commonwealth.

Key Responsibilities:

• Collaborate with Enterprise ZTNA network and security teams, as well as identity and application stakeholders, to design and support ZPA-based access to internal applications.
• Design, implement, and maintain Zscaler Private Access connectivity, including App Connectors, Server Groups, Application Segments, and access policy configurations.
• Analyze and assess legacy network and VPN-based access requirements and translate them into ZPA application-level access models.
• Support onboarding of applications by validating network paths, ports, protocols, and dependencies.
• Configure least-privilege access policies aligned with Zero Trust principles.
• Troubleshoot ZPA-related issues including user access failures and application connectivity.
• Support migration from legacy VPN to ZPA.
• Ensure configurations are documented, auditable, and compliant.
• Develop technical documentation, diagrams, and runbooks.
• Work with vendors and Zscaler support for issue resolution.

Required Skills:

• Strong enterprise networking knowledge including routing, firewalling, DNS, and traffic flow analysis.
• Experience with Zscaler Private Access (ZPA) or similar Zero Trust platforms.
• Deep understanding of Zero Trust Network Access (ZTNA) and segmentation.
• Experience analyzing legacy environments and modernizing access.
• Experience in compliance-driven environments.
• Strong communication and documentation skills.

Preferred Qualifications:

• Zscaler certifications (Zscaler Digital Transformation Administrator / Engineer).
• Certifications such as CCNP, Security+, CySA+.
• Experience in large enterprise or public sector environments.
• Familiarity with CJIS, NISTxxxxxxxxxxxxxxxframeworks.
• Experience in Zero Trust transformation initiatives.