Zscaler Private Access (ZPA) Network Engineer

Description

Position Description Zscaler Private Access (ZPA) Network Engineer Role Summary The Commonwealth is seeking a Zscaler Private Access (ZPA) Network Engineer to support the secure deployment and operationalization of Zscaler Private Access as a key component of the Commonwealth's Zero Trust Network Access (ZTNA) strategy. This role will focus on designing, implementing, and supporting network connectivity and access paths for private applications using ZPA, while translating existing network access models and legacy VPN-based connectivity into scalable, policy-driven access patterns aligned with Zero Trust principles. The position is network-focused and hands-on, supporting application access enablement while ensuring solutions are secure, auditable, and operationally sustainable across the Commonwealth. The role works in close coordination with the Enterprise ZTNA program, including enterprise network and security teams. Key Responsibilities Collaborate with Enterprise ZTNA network and security teams, as well as identity and application stakeholders, to design and support ZPA-based access to internal applications. Design, implement, and maintain Zscaler Private Access connectivity, including App Connectors, Server Groups, Application Segments, and access policy configurations. Analyze and assess legacy network and VPN-based access requirements, agency-specific application needs, and connectivity dependencies, and translate them into ZPA application-level access models. Support the onboarding of applications to ZPA by validating network paths, ports, protocols, and dependency requirements, and coordinating testing and validation activities. Configure and support ZPA access policies that enforce least-privileged access while minimizing disruption to mission-critical operations. Troubleshoot ZPA-related access and connectivity issues, including user access failures, application reachability concerns, and connector health or routing issues. Participate in migration activities to transition users and applications from legacy access models to ZPA in coordination with enterprise and agency stakeholders. Ensure ZPA configurations and access models are documented, auditable, and aligned with Commonwealth security, governance, and compliance requirements. Develop and maintain technical documentation, including configuration standards, procedures, diagrams, and operational runbooks. Engage with vendors and Zscaler support to resolve complex issues and support platform stability and optimization. Required Skills and Experience Strong background in enterprise networking, including routing, firewalling, DNS, and traffic flow analysis. Experience implementing and supporting secure application access technologies such as Zscaler Private Access or similar Zero Trust access platforms. In-depth understanding of Zero Trust Network Access concepts and application-level segmentation. Ability to analyze complex, legacy network environments and translate them into scalable, enforceable access models. Experience working in regulated or compliance-driven environments, ensuring adherence to security and governance standards. Strong documentation, communication, and collaboration skills for cross-functional engagement. Position Characteristics This role supports the Enterprise ZTNA program and works closely with enterprise network and enterprise security teams. The position balances strong security controls with operational requirements, focusing on reliable and secure private application access. The ZPA Network Engineer is responsible for ensuring ZPA-based access is implemented consistently and operates effectively within the Commonwealth's Zero Trust architecture.

Skills

ZPA, Z-scaler, ZIA, customer service, Network engineering, architecture, deployment, security, design, Firewall, cisco, zero trust

Top Skills Details

ZPA,Z-scaler,ZIA,customer service,Network engineering,architecture,deployment

Additional Skills & Qualifications

Preferred Qualifications Zscaler certifications such as Zscaler Digital Transformation Administrator or Zscaler Digital Transformation Engineer. Completion of Zscaler administrator or engineer training courses relevant to ZPA. Industry-recognized certifications such as CCNP, Security+, CySA+, or equivalent. Experience supporting large, multi-agency, or public-sector enterprise environments. Familiarity with regulatory and security frameworks such as CJIS, NIST 800-53, or similar standards. Hands-on experience supporting access modernization initiatives in complex enterprise environments.

Experience Level

Expert Level

Job Type & Location
This is a Contract position based out of Harrisburg, PA.
Pay and Benefits
The pay range for this position is $50.00 - $70.00/hr.
Eligibility requirements apply to some benefits and may depend on your job classification and length of employment. Benefits are subject to change and may be subject to specific elections, plan, or program terms. If eligible, the benefits available for this temporary role may include the following:
Medical, dental & vision
Critical Illness, Accident, and Hospital
401(k) Retirement Plan - Pre-tax and Roth post-tax contributions available
Life Insurance (Voluntary Life & AD&D for the employee and dependents)
Short and long-term disability
Health Spending Account (HSA)
Transportation benefits
Employee Assistance Program
Time Off/Leave (PTO, Vacation or Sick Leave)
Workplace Type
This is a hybrid position in Harrisburg,PA.
Application Deadline
This position is anticipated to close on May 5, 2026.
>About TEKsystems:
We're partners in transformation. We help clients activate ideas and solutions to take advantage of a new world of opportunity. We are a team of 80,000 strong, working with over 6,000 clients, including 80% of the Fortune 500, across North America, Europe and Asia. As an industry leader in Full-Stack Technology Services, Talent Services, and real-world application, we work with progressive leaders to drive change. That's the power of true partnership. TEKsystems is an Allegis Group company.

The company is an equal opportunity employer and will consider all applications without regards to race, sex, age, color, religion, national origin, veteran status, disability, sexual orientation, gender identity, genetic information or any characteristic protected by law.

About TEKsystems and TEKsystems Global Services

We're a leading provider of business and technology services. We accelerate business transformation for our customers. Our expertise in strategy, design, execution and operations unlocks business value through a range of solutions. We're a team of 80,000 strong, working with over 6,000 customers, including 80% of the Fortune 500 across North America, Europe and Asia, who partner with us for our scale, full-stack capabilities and speed. We're strategic thinkers, hands-on collaborators, helping customers capitalize on change and master the momentum of technology. We're building tomorrow by delivering business outcomes and making positive impacts in our global communities. TEKsystems and TEKsystems Global Services are Allegis Group companies. Learn more at TEKsystems.com.

The company is an equal opportunity employer and will consider all applications without regard to race, sex, age, color, religion, national origin, veteran status, disability, sexual orientation, gender identity, genetic information or any characteristic protected by law.