Zscaler ZPA Deployment Engineer

Zohorecruit; Sacramento (CA); On-site; USD 140,000 - 190,000; Full time

Job summary

Zohorecruit is seeking an experienced ZPA Deployment Engineer in Sacramento to lead complex migrations from legacy VPNs to ZPA and to design resilient App Connector architectures with high availability across multiple sites. You will drive end-to-end deployment, integration with Microsoft Entra ID in hybrid AD, and secure access to internal resources while communicating with senior IT leadership.

Ideal candidates will have hands-on ZPA deployments (3+), experience with ZIA and Zscaler Client

Qualifications

• ZPA deployment engineer with enterprise-scale modernization and Zero Trust transformation experience.
• End-to-end deployment, architecture, configuration, and migration from legacy VPN to ZPA.
• Lead end-to-end deployment and production cutover of ZPA.
• Design resilient App Connector architectures with HA across multi-site environments.
• Migrate from FortiClient and Cisco AnyConnect to ZPA.

Responsibilities

• Lead end-to-end ZPA deployments and production cutover.
• Architect and deploy App Connector solutions with HA across sites.
• Configure application segmentation aligned with ZTNA principles.
• Ensure SMB/mapped drive access through ZPA tunnels.
• Collaborate with IT leadership and vendors to drive migration initiatives.

Skills

ZPA deployment

end-to-end deployment

architecture & design

VPN migration

ZTNA & segmentation

App Connector HA

Executive communication

ZIA familiarity

Intune deployment

Hybrid AD integration

Tools

Fortinet FortiGate

Microsoft Entra ID

Active Directory hybrid

Zscaler Client Connector

Intune / MDM

Job description

Sacramento, United States | Posted on 10/02/2026

• Help design, build and continuously improve the clients online platform.
  
• Research, suggest and implement new technology solutions following best practices/standards.
  
• Take responsibility for the resiliency and availability of different products.
  
• Be a productive member of the team.
  

Requirements

• Zscaler ZPA Deployment Engineer for an enterprise network modernization and Zero Trust transformation initiative.
• End-to-end deployment, architecture, configuration, and migration from a legacy VPN environment to Zscaler Private Access (ZPA), combining hands‑on engineering expertise with strong executive communication skills.
• Lead the end-to-end deployment and production cutover of Zscaler Private Access (ZPA).
• Design and deploy resilient App Connector architectures, including HA configurations across multi‑site enterprise environments.
• Lead the migration from legacy VPN solutions such as FortiClient and Cisco AnyConnect to ZPA.
• Configure application segmentation policies aligned with Zero Trust Network Access (ZTNA) principles.
• Ensure seamless access to internal file shares, SMB, and mapped drives through ZPA.
• Integrate ZPA connectors and design access policies with Microsoft Entra ID in hybrid Active Directory environments.
• Participate in discovery and architecture workshops and present technical design decisions to senior IT leadership and executive stakeholders.
• At least 3 hands‑on, end-to-end ZPA deployments, covering architecture, design, implementation, and production cutover.
• Strong technical expertise in App Connector architecture, HA clustering, and multi‑site deployments.
• Strong understanding of application segmentation and ZTNA frameworks.
• Proven experience migrating enterprise VPN environments, including FortiClient and Cisco AnyConnect, to ZPA.
• Hands‑on experience configuring SMB and mapped drive access over ZPA tunnels.
• Strong experience integrating Microsoft Entra ID (Azure AD) with hybrid Active Directory environments.
• Excellent verbal and written communication skills, with strong executive presence in high‑visibility environments.
• Hands‑on experience with Zscaler Internet Access (ZIA) and integration with existing Zscaler tenants.
• Experience deploying Zscaler Client Connector through Microsoft Intune or enterprise MDM solutions.
• Experience delivering network and security migrations within manufacturing or industrial environments.
• Familiarity with Fortinet firewalls and architecture for migration discovery and planning.
  
• A challenging, innovating environment.
  
• Opportunities for learning where needed.