Sr. Zscaler Network Administrator

Description
We are seeking a Senior Zscaler Network Engineer to enhance our current Zscaler rollout capacity and strengthen day-to-day operational support. This role will focus on Zscaler Internet Access (ZIA), Zscaler Private Access (ZPA), and their integration with Palo Alto firewalls, Cisco networking, and Okta.
The engineer will work closely with an existing Principal Network Engineer (FTE) and the broader network/security teams to:
Scale and optimize our ZIA and ZPA deployments
Troubleshoot complex, day-to-day Zscaler and network issues
Own technical intake and assessment for new Zscaler-related projects from internal organizations
Mentor and upskill other team members on Zscaler and related network and identity technologies
The ideal candidate is Zscaler-certified, highly hands-on, and comfortable in a fast-paced enterprise environment. The position is hybrid, with approximately half of the time spent onsite at our Pleasanton, CA HQ and half working remotely.
Key Responsibilities -
Zscaler Rollout & Implementation (ZIA / ZPA):
Execute and enhance the rollout of ZIA and ZPA for users, sites, and applications in partnership with the Principal Network Engineer (FTE).
Implement and refine Zscaler policies, traffic forwarding methods (including PAC files, GRE/IPsec tunnels, and Zscaler Client Connector), and configurations to support new locations, user groups, and applications.
Contribute to implementation plans, change requests, and repeatable runbooks to ensure consistent, high-quality deployments.
Integration with Palo Alto, Cisco, and Okta
Integrate and optimize Zscaler with Palo Alto firewalls and Cisco network infrastructure (routing, switching, SD-WAN/VPN) for secure internet egress and private access.
Implement and maintain Okta integration for authentication, SSO, and user/group-based policy enforcement in Zscaler.
Work with security and identity teams to align policies across Zscaler, Palo Alto, Cisco, and Okta.
Day-to-Day Operations & Troubleshooting:
Serve as a Senior escalation point for Zscaler-related incidents and requests.
Perform detailed troubleshooting across endpoints, Cisco network paths, Palo Alto firewalls, Zscaler (ZIA/ZPA), and applications to resolve connectivity, performance, and policy issues.
Collaborate with internal teams and vendors to drive issues to root cause and permanent remediation.
Improve monitoring, logging, and alerting for ZIA and ZPA, leveraging existing tools and SIEM integrations.
Project Intake & Delivery:
Act as a technical contact for new project intake where Zscaler is a dependency (e.g., onboarding new applications to ZPA, new sites or user groups to ZIA, or new security requirements).
Assess requirements from internal teams, identify Zscaler, Palo Alto, Cisco, and Okta impacts, and propose appropriate technical designs and implementation approaches.
Provide effort estimates, dependencies, and clear technical tasks to support project planning and execution.
Mentoring & Team Enablement:
Mentor and coach other network and security engineers on ZIA, ZPA, Palo Alto, Cisco, and Okta integrations.
Share best practices through documentation, knowledge-transfer sessions, and active participation in design and review discussions.
Help standardize operational procedures, troubleshooting playbooks, and checklists for the broader team.
Documentation & Standards:
Maintain and improve technical documentation for Zscaler deployments, policies, integrations, and operational workflows.
Contribute to standards for Zscaler configuration, change management, and overall security posture across Zscaler, Palo Alto, Cisco, and Okta.
Skills
Zscaler, deployment, zscaler private access, palo alto firewalls, Cisco Networking, okta
Additional Skills & Qualifications
Required Qualifications:
5+ years of experience in network engineering in medium-to-large enterprise environments.
Strong, hands-on experience deploying and supporting Zscaler Internet Access (ZIA) and Zscaler Private Access (ZPA) in production.
Current Zscaler certification (e.g., Zscaler Certified Associate / Professional / Architect or equivalent).
Practical experience integrating Zscaler with:
Palo Alto firewalls
Cisco networking (routing, switching, VPN/SD-WAN)
Okta for identity, SSO, and group-based access
Solid understanding of:
TCP/IP, DNS, HTTP/HTTPS, SSL/TLS
Routing, switching, VPNs, and SD-WAN
Zero Trust Network Access (ZTNA) principles and secure remote access patterns
Proven ability to troubleshoot complex network and security issues using logs, packet captures, and systematic analysis across multiple platforms (Zscaler, Palo Alto, Cisco, Okta).
Strong communication skills, with the ability to interact effectively with engineers, project managers, and non-technical stakeholders.
Demonstrated experience mentoring or supporting less-experienced engineers.
Job Type & Location
This is a Contract position based out of Pleasanton, CA.
Pay and Benefits
The pay range for this position is $51.75 - $65.75/hr.
Eligibility requirements apply to some benefits and may depend on your job classification and length of employment. Benefits are subject to change and may be subject to specific elections, plan, or program terms. If eligible, the benefits available for this temporary role may include the following:
Medical, dental & vision
Critical Illness, Accident, and Hospital
401(k) Retirement Plan - Pre-tax and Roth post-tax contributions available
Life Insurance (Voluntary Life & AD&D for the employee and dependents)
Short and long-term disability
Health Spending Account (HSA)
Transportation benefits
Employee Assistance Program
Time Off/Leave (PTO, Vacation or Sick Leave)
Workplace Type
This is a hybrid position in Pleasanton,CA.
Application Deadline
This position is anticipated to close on May 22, 2026.

About TEKsystems

We're partners in transformation. We help clients activate ideas and solutions to take advantage of a new world of opportunity. We are a team of 80,000 strong, working with over 6,000 clients, including 80% of the Fortune 500, across North America, Europe and Asia. As an industry leader in Full-Stack Technology Services, Talent Services, and real-world application, we work with progressive leaders to drive change. That's the power of true partnership. TEKsystems is an Allegis Group company.

The company is an equal opportunity employer and will consider all applications without regards to race, sex, age, color, religion, national origin, veteran status, disability, sexual orientation, gender identity, genetic information or any characteristic protected by law.

About TEKsystems and TEKsystems Global Services

We're a leading provider of business and technology services. We accelerate business transformation for our customers. Our expertise in strategy, design, execution and operations unlocks business value through a range of solutions. We're a team of 80,000 strong, working with over 6,000 customers, including 80% of the Fortune 500 across North America, Europe and Asia, who partner with us for our scale, full-stack capabilities and speed. We're strategic thinkers, hands-on collaborators, helping customers capitalize on change and master the momentum of technology. We're building tomorrow by delivering business outcomes and making positive impacts in our global communities. TEKsystems and TEKsystems Global Services are Allegis Group companies. Learn more at TEKsystems.com.

The company is an equal opportunity employer and will consider all applications without regard to race, sex, age, color, religion, national origin, veteran status, disability, sexual orientation, gender identity, genetic information or any characteristic protected by law.

San Francisco Fair Chance Ordinance: Pursuant to the San Francisco Fair Chance Ordinance, for all positions located in the city and county of San Francisco, we will consider for employment qualified applicants with arrest and conviction records.

Massachusetts Lie Detector: It is unlawful in Massachusetts to require or administer a lie detector test as a condition of employment or continued employment. An employer who violates this law shall be subject to criminal penalties and civil liability.

Use of Artificial Intelligence (AI): We may use Artificial Intelligence (AI) to support parts of our hiring process, including sourcing, screening, and evaluating candidates. AI helps assess applications and qualifications, but final decisions are made by our hiring team. By applying, you acknowledge and agree that your application may be reviewed using AI tools.