Network Enginer Zscaler ZPA Deployment exp

Accrescent Group; Sacramento (CA); On-site; USD 96,000 - 138,000; Full time

Job summary

Accrescent Group seeks a Zscaler ZPA Deployment Engineer to lead end-to-end ZPA deployments at enterprise scale. Must have ZCCP or equivalent ZPA experience, with hands-on design, production cutover, and strong app connector knowledge. Expect onsite work in Sacramento, CA, and travel to Dallas, TX.

You will collaborate with a CIO and infrastructure team, translating security and network requirements into robust ZPA solutions, including hybrid AD integration and VPN replacement strategies.

Qualifications

• ZCCP - ZPA track or equivalent ZPA deployment experience at enterprise scale.
• Minimum 3 hands-on ZPA deployments end-to-end.
• Deep experience with App Connector architecture (HA, multi-site).
• Strong understanding of Zero Trust Network Access principles.
• Experience replacing legacy VPN with ZPA (FortiClient/Cisco AnyConnect).
• Microsoft Entra ID integration - ZPA connector and policy design in hybrid AD.
• Excellent communication and executive presence in CIO-level rooms.

Skills

ZPA deployment

ZCCP

End-to-end deployments

App Connector architecture

Zero Trust principles

VPN replacement

ZPA Client Connector integration

Executive communication

Job description

We are seekingZscaler ZPA Deployment Engineer withCertified Cloud Professional (ZCCP)- ZPA track orequivalent ZPA deployment experience at enterprise scale.

JOB DESCRIPTION:

Zscaler ZPA Deployment Engineer

Location: Sacramento, CA (onsite) + Dallas, Texas

Duration -- 3 months

VISA: Any

Must Have

• Zscaler Certified Cloud Professional (ZCCP) - ZPA track, or equivalent ZPA deployment experience at enterprise scale
• Minimum 3 hands-on ZPA deployments - end to end, from design through production cutover
• Deep experience with App Connector architecture - HA configuration, multi-site deployment
• Strong understanding of application segmentation and Zero Trust Network Access principles
• Experience replacing legacy VPN (FortiClient, Cisco AnyConnect, or similar) with ZPA
• Hands-on with SMB/mapped drive access over ZPA
• Microsoft Entra ID integration - ZPA connector and policy design in hybrid AD environments
• Excellent communication - this resource will be in the room with a senior CIO and infrastructure team. Technical depth AND executive presence required

Nice to Have

• ZIA experience - client already on ZIA, familiarity with the existing tenant is an advantage
• Intune/MDM experience - for ZPA Client Connector deployment
• Experience in manufacturing or industrial environments
• Familiarity with Fortinet - understanding the incumbent for migration planning