ZPA Engineer — Enterprise Zero-Trust Access Specialist

Lever, Inc.; United States; Remote; USD 120,000 - 180,000; Full time

Benefits offered by this job

Competitive salary

Best in class medical coverage

401k with company match

Job summary

True Zero Technologies is seeking a Zscaler Engineer to design, deploy, and operate a Zero Trust–aligned ZPA environment. You will replace legacy VPNs with scalable access, support 16,600 external users across 1,600 agencies, and work with identity, networking, and security teams to ensure secure access.

You will configure App Connectors, browsers, and client connectors, integrate logging with SIEMs, and develop migration plans with thorough documentation for deployment and ongoing support.

Qualifications

• Hands-on experience designing, deploying, configuring, and supporting ZPA in enterprise environments.
• Strong understanding of Zero Trust Network Access concepts and replacing traditional VPN with app-centric access.
• Experience deploying Zscaler Client Connector and coexisting with other VPN technologies.
• Experience architecting ZPA App Connectors, App Connector Groups, segments, and Browser Access.
• Knowledge of DNS, routing, and firewall rules in enterprise networks.
• Experience with identity federation technologies (Okta, SAML, MFA).
• Experience integrating Zscaler logging with SIEM or analytics (LSS, InsightIDR).
• Ability to troubleshoot end-to-end across endpoints, ZPA, networks, and identity systems.
• Experience planning large-scale migrations across multiple org units.
• Strong documentation skills for designs, as-builts, runbooks, and guides.

Responsibilities

• Design and implement ZPA architectures, including App Connector placement, redundancy, and policies.
• Harden ZPA tenant with least-privilege admin roles and secure configurations.
• Develop ZPA Client Connector configurations coexisting with other VPNs.
• Design Client Connector and Browser Access solutions based on user population and requirements.
• Configure DNS and app access with internal FQDN design and controlled exposure.
• Validate end-to-end connectivity from external endpoints to protected apps.
• Integrate ZPA with identity services (SAML with Okta) and mapping.
• Configure Zscaler LSS and SIEM/monitoring integrations.
• Create migration procedures for onboarding organizations and apps.
• Produce as-built docs covering tenant, connectors, policies, and configurations.
• Develop runbooks and troubleshooting procedures for admins and support.

Skills

Zscaler Private Access (ZPA) design

ZTNA concepts

Zscaler Client Connector deployment

ZPA App Connectors configuration

DNS and Network design

SAML federation with Okta

LSS and SIEM integration

Migration planning

Documentation and runbooks

Cross-team communication

Job description

True Zero Technologies is seeking a Zscaler Engineer to design, deploy, and operate a Zero Trust–aligned ZPA environment. You will replace legacy VPNs with scalable access, support 16,600 external users across 1,600 agencies, and work with identity, networking, and security teams to ensure secure access.

You will configure App Connectors, browsers, and client connectors, integrate logging with SIEMs, and develop migration plans with thorough documentation for deployment and ongoing support.