← All roles

ZScaler SME Network Engineer

Agile Defense· Digital Transformation – Network Operations
Apply on company site
Ashburn, VA$170k - $185kRegularPosted 1mo ago

About the role

Senior Network Engineer focused on designing, deploying, and optimizing enterprise-wide Zscaler SASE solutions (ZIA, ZPA, ZDX) to support DHS mission, with a Zero Trust, multi-cloud/hybrid environment.

Responsibilities

  • Architecture & Engineering: Design, implement, and maintain enterprise Zscaler deployments (ZIA, ZPA, ZDX, and Zscaler Client Connector) across multi-cloud and hybrid corporate environments.
  • Policy & Governance: Create, audit, and tune security policies, including URL filtering, Cloud Application Control, SSL/TLS deep packet inspection, Data Loss Prevention (DLP), and sandbox policies.
  • Zero Trust Deployment: Formulate and execute access policies within ZPA to enable least-privilege direct access to internal applications in private clouds (AWS, Azure, GCP) and on-premises data centers without traditional VPN overhead.
  • Operational Troubleshooting: Serve as Tier-3/Tier-4 escalation support for complex proxy routing, PAC file debugging, identity integration, authentication drops, and application latency issues.
  • Agent Lifecycle Management: Manage enterprise distribution, health checks, profile tuning, and version upgrades of Zscaler Client Connector (ZCC) across macOS, Windows, iOS, and Android platforms.
  • Observability & Analytics: Leverage ZDX and cloud analytics to isolate user experience degradation across endpoint, network ISP, and application levels; configure automated alerting and SIEM log integration (Splunk, Cribl).
  • Cross-Functional Integration: Partner with IAM teams to configure SAML/SCIM attributes with IdPs such as Okta, Microsoft Entra ID (Azure AD), or Ping Identity.
  • Troubleshooting & Incident Management: Provide Tier 2/Tier 3 escalation support for network outages, circuit degradations, and performance issues; conduct RCA and coordinate vendor support.
  • Documentation & Asset Management: Maintain accurate network diagrams (Visio), topology maps, inventory databases, SOPs, and change control tickets (ServiceNow/Remedy).
  • Support On-Call & Escalation Management: support 24/7/365 on-call rotation readiness to respond to Tier 3 critical network incidents within SLA; implement Emergency Change Requests (ECR), Emergency Break Fix (EBF), or Change Requests when needed.
  • Root Cause Analysis (RCA) or Post Incident Reporting: Participate in RCA or post incident analysis for mission critical applications and infrastructure.
  • Project Support: Align network engineering deliverables, milestone schedules, and resource planning with enterprise project objectives.
  • Excellent problem-solving and analytical skills, with the ability to troubleshoot complex network issues.
  • Scheduled and Adhoc Travel: Ability to travel within the United States up to 20% of the time.

Qualifications

  • Bachelor’s degree in CS/Engineering or equivalent experience (implied from senior role)
  • Extensive experience with Zscaler deployments (ZIA, ZPA, ZDX) in multi-cloud/hybrid environments
  • Strong knowledge of SAML/SCIM, IdPs (Okta, Azure AD, Ping Identity)
  • Experience with cloud providers (AWS, Azure, GCP)
  • Proven incident response, RCA, and hands-on troubleshooting skills
  • Experience with VPN alternatives and Zero Trust architectures
  • Proficient with SNMP/Visio/SOPs/ServiceNow/Remedy
  • On-call experience and travel readiness up to 20%

Skills

Required:Zscaler deployments (ZIA, ZPA, ZDX)Zero Trust networkingPolicy governance (DLP, SSL/TLS inspection, URL filtering)SAML/SCIM with IdPs (Okta, Azure AD, Ping Identity)
Nice to have:PAC file debugging

Benefits

  • Competitive salary ($170,000 - $185,000 per year)
  • Health, dental, vision benefits
  • Paid time off and holidays
  • 401(k) with company match
  • On-call and travel allowances (as applicable)
Last updated Oct 21, 2026. Interested? Apply on the company site.

About Agile Defense

Always Evolving

Agile Defense delivers advanced capabilities and solutions tailored to the most critical national security and civilian missions.

national securitycivilian missionsinnovationcapabilitiessolutions
Company profileWebsite

More open roles at Agile Defense