Zscaler ZPA Deployment Engineer

Accrescent Group; Sacramento (CA); On-site; USD 96,000 - 165,000; Full time

Job summary

Zscaler is seeking a ZPA Deployment Engineer for onsite work in Sacramento, CA, with additional duties in Dallas, TX. This three-month contract requires hands-on ZPA deployments, strong App Connector and hybrid AD integration experience, and an ability to operate with CIO-level stakeholders.

You will replace legacy VPNs with ZPA, work on enterprise-scale deployments, and ensure secure access via Zero Trust principles. Onsite collaboration is essential for success.

Qualifications

• ZCCP - ZPA track or equivalent ZPA deployment experience at enterprise scale.
• Minimum 3 hands-on ZPA deployments end-to-end from design through production cutover.
• Deep experience with App Connector architecture - HA configuration, multi-site deployment.
• Strong understanding of application segmentation and Zero Trust Network Access principles.
• Experience replacing legacy VPN (FortiClient, Cisco AnyConnect, or similar) with ZPA.
• Hands-on with SMB/mapped drive access over ZPA.
• Microsoft Entra ID integration - ZPA connector and policy design in hybrid AD environments.
• Excellent communication - this resource will be in the room with a senior CIO and infrastructure team.

Skills

ZPA deployment

End-to-end deployment

Executive communication

Zero Trust

Tools

App Connector architecture

Intune/MDM

Hybrid AD integration

ZIA familiarity

Job description

We are seekingZscaler ZPA Deployment Engineer withCertified Cloud Professional (ZCCP)- ZPA track orequivalent ZPA deployment experience at enterprise scale.

JOB DESCRIPTION:

Zscaler ZPA Deployment Engineer

Location: Sacramento, CA (onsite) + Dallas, Texas

Duration -- 3 months

VISA: Any

Must Have

• Zscaler Certified Cloud Professional (ZCCP) - ZPA track, or equivalent ZPA deployment experience at enterprise scale
• Minimum 3 hands-on ZPA deployments - end to end, from design through production cutover
• Deep experience with App Connector architecture - HA configuration, multi-site deployment
• Strong understanding of application segmentation and Zero Trust Network Access principles
• Experience replacing legacy VPN (FortiClient, Cisco AnyConnect, or similar) with ZPA
• Hands-on with SMB/mapped drive access over ZPA
• Microsoft Entra ID integration - ZPA connector and policy design in hybrid AD environments
• Excellent communication - this resource will be in the room with a senior CIO and infrastructure team. Technical depth AND executive presence required

Nice to Have

• ZIA experience - client already on ZIA, familiarity with the existing tenant is an advantage
• Intune/MDM experience - for ZPA Client Connector deployment
• Experience in manufacturing or industrial environments
• Familiarity with Fortinet - understanding the incumbent for migration planning