{"id":2629997,"url":"https://alion.io/job/peraton-senior-network-engineer-zscaler-specialist","title":"Senior Network Engineer – Zscaler Specialist","company":{"id":722,"name":"Peraton","domain":"peraton.com","url":"https://alion.io/company/peraton","size_band":"1001-5000","is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"iCIMS","truth_index":{"grade":"A","score":100,"open_postings":11,"ghost_share":0,"stale_share":0,"repost_share":0.091,"time_to_fill_p50_days":10,"computed_at":"2026-10-23T05:54:15Z"}},"role":"Networking","role_family":"Networking","seniority":"senior","employment_type":null,"work_mode":"on_site","remote_scope":null,"remote_scope_basis":null,"remote_working_hours":null,"hiring_geo_confidence":"structured","locations":["Ashburn, United States"],"countries":["US"],"hiring_countries":[],"hiring_countries_total":0,"salary":{"min":135000,"max":216000,"currency":"USD","period":"year","gross":null,"usd_annual":216000},"salary_estimate":null,"experience_years_min":5,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"BGP","optional":false},{"name":"DLP","optional":false},{"name":"DNS","optional":false},{"name":"IBM QRadar","optional":false},{"name":"Least Privilege","optional":false},{"name":"Microsoft Entra ID","optional":false},{"name":"Microsoft Sentinel","optional":false},{"name":"Okta","optional":false},{"name":"Ping Identity","optional":false},{"name":"SIEM","optional":false},{"name":"Splunk","optional":false},{"name":"TCP/IP","optional":false},{"name":"VMWare","optional":false},{"name":"Zero Trust","optional":false},{"name":"Zscaler","optional":false},{"name":"Ansible","optional":true},{"name":"AWS","optional":true},{"name":"Azure","optional":true},{"name":"FedRAMP","optional":true},{"name":"GCP","optional":true},{"name":"HIPAA","optional":true},{"name":"PCI DSS","optional":true},{"name":"Python","optional":true},{"name":"Terraform","optional":true}],"status":"live","first_seen_at":"2026-10-15T15:53:48Z","employer_posted_date":"2026-10-15","last_verified_at":"2026-10-23T12:14:17Z","board_verified":true,"closed_at":null,"days_open":8,"trust":{"level":"ok","repost_count":null,"flags":[],"days_open":8},"description":"Responsibilities\nPeraton is seeking an experienced Senior Network Engineer specializing in Zscaler cloud security platforms to support enterprise network security and infrastructure modernization initiatives. This individual will serve as a subject matter expert (SME) in Zscaler technologies, leading the design, deployment, migration, and optimization of Zero Trust and Secure Access Service Edge (SASE) architectures. The Senior Network Engineer will collaborate with network, security, and cloud teams to modernize legacy security infrastructure and implement scalable, cloud based solutions that protect users, applications, and data across distributed environments.\nThe ideal candidate will bring hands on experience with Zscaler Internet Access (ZIA) and Zscaler Private Access (ZPA), strong networking fundamentals, and expertise in cloud security policy management, identity integration, and enterprise network security.\nThis position requires full time, on site presence at one of the designated locations in Ashburn, VA; Springfield, VA; or Orlando, FL.\nDay to Day Roles and Responsibilities:\nZscaler Architecture & Platform Management\nDesign, deploy, configure, and maintain Zscaler solutions, with a primary focus on Zscaler Internet Access (ZIA) and Zscaler Private Access (ZPA).\n\nSupport additional Zscaler capabilities, including Zscaler Digital Experience (ZDX) and cloud native application protection, as required.\n\nLead migrations from legacy VPNs, on premises proxies, and traditional perimeter security solutions to Zscaler cloud security architectures.\n\nDeploy and manage Zscaler Client Connector across supported endpoint platforms.\n\nMaintain architecture diagrams, configuration documentation, policy runbooks, onboarding guides, and change records.\n\nZero Trust & Security Policy Management\nImplement and optimize Zero Trust Network Access (ZTNA) and Secure Access Service Edge (SASE) solutions to protect enterprise applications, users, and data.\n\nConfigure ZIA security policies, including URL filtering, threat prevention, SSL/TLS inspection, DNS security, cloud application controls, and data loss prevention (DLP).\n\nConfigure and manage ZPA application segments, App Connectors, server groups, and access policies to enforce least privilege access.\n\nManage certificate configurations, inspection policies, and appropriate security bypass rules.\n\nConduct policy audits and optimization activities to reduce the attack surface, improve performance, and support compliance requirements.\n\nIdentity & Network Integration\nIntegrate Zscaler with identity providers, including Microsoft Entra ID, Okta, and Ping Identity, using SAML and SCIM provisioning.\n\nConfigure Zscaler traffic forwarding methods, including GRE and IPsec tunnels, PAC files, and proxy chaining.\n\nIntegrate Zscaler with SD WAN platforms, including Cisco Viptela, VMware VeloCloud, and Fortinet, to support secure traffic steering.\n\nCollaborate with application owners to onboard workloads into ZPA and establish appropriate access controls.\n\nMonitoring, Troubleshooting & Incident Response\nMonitor platform health, user experience, connectivity, and security events using the Zscaler Admin Portal and ZDX.\n\nAnalyze logs and investigate potential threats using Zscaler Nanolog Streaming Service (NSS) and integrated security information and event management (SIEM) platforms, including Splunk, Microsoft Sentinel, and IBM QRadar.\n\nTroubleshoot complex connectivity, application access, and security policy enforcement issues.\n\nParticipate in an on call rotation to support critical Zscaler infrastructure and user connectivity incidents.\n\nCollaborate with network, security, and cloud teams to resolve incidents and maintain reliable service delivery.\n\nTechnical Leadership & Continuous Improvement\nMentor junior engineers on Zero Trust principles, SASE architecture, Zscaler administration, and network security best practices.\n\nMaintain technical documentation, operational procedures, and troubleshooting guides.\n\nIdentify opportunities to improve security controls, platform performance, and operational efficiency.\n\nCommunicate technical issues, risks, and recommended solutions to engineering teams and stakeholders.\n\nQualifications\nBasic Qualifications:\nBachelor's degree and 8 years of experience, a master's degree and 6 years of experience, an associate's degree and 10 years of experience, or a high school diploma or equivalent and 12 years of experience.\n\nMust be a U.S. Citizen and eligible to obtain the required DHS CBP clearance.\n\nMinimum of 5 years of hands on network engineering or network security engineering experience, including at least 2 years dedicated to Zscaler platform administration and architecture.\n\nDemonstrated hands on experience configuring, administering, and troubleshooting Zscaler Internet Access (ZIA) and Zscaler Private Access (ZPA).\n\nStrong understanding of Zero Trust Network Access (ZTNA), Secure Access Service Edge (SASE), and enterprise cloud security architectures.\n\nExperience configuring ZIA security policies, SSL/TLS inspection, certificate management, and threat prevention controls.\n\nExperience configuring ZPA App Connectors, application segments, and policy based access controls.\n\nWorking knowledge of identity federation and provisioning technologies, including SAML 2.0, SCIM, Microsoft Entra ID, or Okta.\n\nStrong networking fundamentals, including TCP/IP, DNS, HTTP/S, BGP, routing, firewall policies, and Zscaler traffic forwarding methods.\n\nStrong analytical, troubleshooting, documentation, and communication skills, with the ability to resolve complex connectivity and security issues.\n\nPreferred Qualifications:\nExperience supporting federal government, defense, or other regulated environments.\n\nAn active DHS Public Trust or Top Secret security clearance or higher is preferred.\n\nActive Cisco Certified Network Professional (CCNP) certification. CCNP Security is preferred, and CCNP Enterprise is acceptable.\nZscaler Certified Professional (ZCP) certification in ZIA and/or ZPA. Zscaler Certified Engineer (ZCE) or Zscaler Certified Architect (ZCA) certification is also desirable.\n\nExperience with Zscaler Digital Experience (ZDX) or Zscaler Posture Control and cloud native application protection capabilities.\n\nExperience integrating Zscaler NSS with SIEM platforms, including Splunk, Microsoft Sentinel, or IBM QRadar.\n\nExperience integrating Zscaler with SD WAN platforms, including Cisco Viptela, VMware VeloCloud, or Fortinet.\n\nExperience deploying Zscaler solutions across AWS, Microsoft Azure, or Google Cloud Platform environments.\n\nKnowledge of security and compliance frameworks, including NIST SP 800 53, FedRAMP, PCI DSS, HIPAA, or DoD Security Technical Implementation Guides (STIGs).\n\nExperience with scripting and automation using Python, Ansible, Terraform, or Zscaler APIs.\n\nExperience supporting large scale Zscaler deployments across thousands of users or multiple geographic regions.\n\nFamiliarity with Palo Alto Prisma Access or other SASE platforms.\n\nBachelor's degree in Computer Science, Information Technology, Cybersecurity, Network Engineering, or a related field. Equivalent combinations of education, training, and professional certifications will be considered.\n\nAdditional certifications such as Palo Alto PCNSE, CCIE Security, CompTIA Security+, AWS or Azure Security Specialty, or Certified Cloud Security Professional (CCSP).\n\nPeraton Overview\nPeraton is a next-generation national security company that drives missions of consequence spanning the globe and extending to the farthest reaches of the galaxy. As the world’s leading mission capability integrator and transformative enterprise IT provider, we deliver trusted, highly differentiated solutions and technologies to protect our nation and allies. Peraton operates at the critical nexus between traditional and nontraditional threats across all domains: land, sea, space, air, and cyberspace. The company serves as a valued partner to essential government agencies and supports every branch of the U.S. armed forces. Each day, our employees do the can’t be done by solving the most daunting challenges facing our customers. Visit peraton.com to learn how we’re keeping people around the world safe and secure.\nTarget Salary Range\n$135,000 - $216,000. This represents the typical salary range for this position. Salary is determined by various factors, including but not limited to, the scope and responsibilities of the position, the individual’s experience, education, knowledge, skills, and competencies, as well as geographic location and business and contract considerations. Depending on the position, employees may be eligible for overtime, shift differential, and a discretionary bonus in addition to base pay.EEO\nEEO: Equal opportunity employer, including disability and protected veterans, or other characteristics protected by law.","description_format":"text","description_chars":8896,"description_truncated":false,"requirements":{"experience_years_min":5,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":{"level":"high_school","optional":true},"security_clearance":true,"languages":[]},"benefits":[],"hiring_locations":[{"name":"United States","iso":"US","kind":"country"}],"hiring_excludes":[],"relocation_offered":false,"industries":["National Security","Information Security","Homeland Security","Systems Integrators"],"lifecycle":[{"event":"open","at":"2026-10-15T15:53:48Z"}],"visa":[],"liveness":{"score":63,"band":"ok","label":"Likely open","p_open":1,"p_active":0.836,"p_room":0.75,"age_days":7,"expected_fill_days":10,"reasons":["conf:3","velocity","win:late","comp:brand"],"computed_at":"2026-10-23T05:54:15Z"},"pay":{"stated_usd_annual":216000,"is_top_pay":true},"html_url":"https://alion.io/job/peraton-senior-network-engineer-zscaler-specialist","json_url":"https://alion.io/job/peraton-senior-network-engineer-zscaler-specialist.json","meta":{"generated_at":"2026-10-23T16:35:02Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":25108,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-10-24T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.02,"usd":0.002,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":722},"rest":"https://alion.io/mcp/rest/get_company?id=722"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Fperaton-senior-network-engineer-zscaler-specialist"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":1,"usd":0.1},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Fperaton-senior-network-engineer-zscaler-specialist"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.02,"usd":0.002},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Fperaton-senior-network-engineer-zscaler-specialist"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/peraton-senior-network-engineer-zscaler-specialist\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Fperaton-senior-network-engineer-zscaler-specialist"}]}