ZPA Deployment Engineer (ZCCP) – Enterprise-Scale VPN Modernization

Accrescent Group; Sacramento (CA); On-site; USD 96,000 - 138,000; Full time

Job summary

Accrescent Group seeks a Zscaler ZPA Deployment Engineer to lead end-to-end ZPA deployments at enterprise scale. Must have ZCCP or equivalent ZPA experience, with hands-on design, production cutover, and strong app connector knowledge. Expect onsite work in Sacramento, CA, and travel to Dallas, TX.

You will collaborate with a CIO and infrastructure team, translating security and network requirements into robust ZPA solutions, including hybrid AD integration and VPN replacement strategies.

Qualifications

• ZCCP - ZPA track or equivalent ZPA deployment experience at enterprise scale.
• Minimum 3 hands-on ZPA deployments end-to-end.
• Deep experience with App Connector architecture (HA, multi-site).
• Strong understanding of Zero Trust Network Access principles.
• Experience replacing legacy VPN with ZPA (FortiClient/Cisco AnyConnect).
• Microsoft Entra ID integration - ZPA connector and policy design in hybrid AD.
• Excellent communication and executive presence in CIO-level rooms.

Skills

ZPA deployment

ZCCP

End-to-end deployments

App Connector architecture

Zero Trust principles

VPN replacement

ZPA Client Connector integration

Executive communication

Job description

Accrescent Group seeks a Zscaler ZPA Deployment Engineer to lead end-to-end ZPA deployments at enterprise scale. Must have ZCCP or equivalent ZPA experience, with hands-on design, production cutover, and strong app connector knowledge. Expect onsite work in Sacramento, CA, and travel to Dallas, TX.

You will collaborate with a CIO and infrastructure team, translating security and network requirements into robust ZPA solutions, including hybrid AD integration and VPN replacement strategies.