Senior Zscaler Network Engineer - Zero Trust & SASE

Agile Defense, Inc.; Ashburn (GA); On-site; USD 140,000 - 190,000; Full time

Job summary

Agile Defense is seeking a Senior Network Engineer to design, deploy, and optimize enterprise Zscaler solutions across multi-cloud and on‑prem environments. You will lead the zero-trust deployment and craft security policies for DLP, SSL/TLS inspection, and URL filtering.

Responsibilities include troubleshooting complex network issues, coordinating RCAs, and providing Tier 2/3 escalation support. Occasional travel within the United States is required.

Qualifications

• Senior network engineer responsible for design, deployment, and optimization of enterprise Zscaler across multi-cloud and on‑prem environments.
• Create, audit, and tune security policies including DLP, SSL/TLS inspection, and URL filtering.
• Formulate access policies in ZPA for least-privilege internal app access in private clouds and data centers.
• Provide Tier 2/3 escalation support for complex network issues and perform RCAs.
• Manage ZCC client distribution and upgrades across macOS, Windows, iOS, and Android.
• Travel within the United States up to 20% as required.

Responsibilities

• Design, implement, and maintain enterprise Zscaler deployments (ZIA, ZPA, ZDX).
• Configure security policies and governance across cloud and on-premises environments.
• Lead Zero Trust deployment and access control for internal apps.
• Troubleshoot proxy routing, PAC files, and authentication issues.
• Support on-call rotation and emergency change processes.

Skills

Zscaler deployments

Zero Trust

SASE

Policy governance

Troubleshooting

On-call support

Tools

Zscaler

ZDX

Splunk

Cribl

ServiceNow/Remedy

Visio

Job description

Agile Defense is seeking a Senior Network Engineer to design, deploy, and optimize enterprise Zscaler solutions across multi-cloud and on‑prem environments. You will lead the zero-trust deployment and craft security policies for DLP, SSL/TLS inspection, and URL filtering.

Responsibilities include troubleshooting complex network issues, coordinating RCAs, and providing Tier 2/3 escalation support. Occasional travel within the United States is required.