ZPA Deployment Engineer: Zero Trust & Multi-Site HA

GeekSoft Consulting; Sacramento (CA); On-site; USD 140,000 - 190,000; Full time

Job summary

Zohorecruit is seeking an experienced ZPA Deployment Engineer in Sacramento to lead complex migrations from legacy VPNs to ZPA and to design resilient App Connector architectures with high availability across multiple sites. You will drive end-to-end deployment, integration with Microsoft Entra ID in hybrid AD, and secure access to internal resources while communicating with senior IT leadership.

Ideal candidates will have hands-on ZPA deployments (3+), experience with ZIA and Zscaler Client

Qualifications

• ZPA deployment engineer with enterprise-scale modernization and Zero Trust transformation experience.
• End-to-end deployment, architecture, configuration, and migration from legacy VPN to ZPA.
• Lead end-to-end deployment and production cutover of ZPA.
• Design resilient App Connector architectures with HA across multi-site environments.
• Migrate from FortiClient and Cisco AnyConnect to ZPA.

Responsibilities

• Lead end-to-end ZPA deployments and production cutover.
• Architect and deploy App Connector solutions with HA across sites.
• Configure application segmentation aligned with ZTNA principles.
• Ensure SMB/mapped drive access through ZPA tunnels.
• Collaborate with IT leadership and vendors to drive migration initiatives.

Skills

ZPA deployment

end-to-end deployment

architecture & design

VPN migration

ZTNA & segmentation

App Connector HA

Executive communication

ZIA familiarity

Intune deployment

Hybrid AD integration

Tools

Fortinet FortiGate

Microsoft Entra ID

Active Directory hybrid

Zscaler Client Connector

Intune / MDM

Job description

Zohorecruit is seeking an experienced ZPA Deployment Engineer in Sacramento to lead complex migrations from legacy VPNs to ZPA and to design resilient App Connector architectures with high availability across multiple sites. You will drive end-to-end deployment, integration with Microsoft Entra ID in hybrid AD, and secure access to internal resources while communicating with senior IT leadership.

Ideal candidates will have hands-on ZPA deployments (3+), experience with ZIA and Zscaler Client