Senior ZTNA & SSE Engineer — Cloud Access Leader

CoStar Group, Inc.; Arlington (VA); Hybrid; USD 118,000 - 176,000; Full time

Benefits offered by this job

Healthcare coverage

401(k) with matching

Tuition reimbursement

On-site fitness center

Wellness programs

Job summary

CoStar Group, Inc. in Arlington, VA is seeking a Senior Zero Trust Network Access Engineer to design, implement, and optimize cloud-delivered ZTNA and SSE platforms, supporting 9,000+ employees globally.

You will lead engineering initiatives, troubleshoot end‑to‑end connectivity, and coordinate incident response across security, network, and cloud teams. Hybrid schedule with in‑office Mon‑Thu and optional remote Friday.

Qualifications

• Bachelor’s degree required in a related field.
• 7+ years in enterprise networking or security engineering.
• 3+ years hands-on with one or more ZTNA or SSE platforms (Zscaler/Netskope/Cloudflare/Prisma Access/Cisco).
• Strong ability to diagnose complex connectivity and performance problems.
• Excellent communication and end-to-end design ownership.

Responsibilities

• Design, deploy, configure, operate, and optimize ZTNA and SSE platforms (ZTNA, SSE).
• Lead migrations from traditional VPN and on‑prem architectures to cloud-delivered ZTNA.
• Serve as senior escalation point for complex connectivity and performance issues.
• Lead cross‑domain troubleshooting across endpoints, DNS, routing, NAT, proxies, and identities.
• Automate tasks and maintain architecture diagrams, runbooks, and standards.

Skills

TCP/IP

DNS

DHCP

routing

NAT

TLS

firewalls

VPN technologies

troubleshooting

ZTNA platforms

Education

Bachelor’s Degree

Tools

Zscaler

Netskope

Cloudflare

Palo Alto Prisma Access

Cisco Secure Access

Job description

CoStar Group, Inc. in Arlington, VA is seeking a Senior Zero Trust Network Access Engineer to design, implement, and optimize cloud-delivered ZTNA and SSE platforms, supporting 9,000+ employees globally.

You will lead engineering initiatives, troubleshoot end‑to‑end connectivity, and coordinate incident response across security, network, and cloud teams. Hybrid schedule with in‑office Mon‑Thu and optional remote Friday.