OA/ETSO ZPA Network Engineer

Job : OA/ETSO ZPA Network Engineer

Location: Harrisburg, PA
Local candidates only

The Commonwealth is seeking a Zscaler Private Access (ZPA) Network Engineer to support the secure deployment and operationalization of ZPA as part of its Zero Trust Network Access (ZTNA) strategy. This role is hands-on and network-focused, responsible for designing, implementing, and supporting secure access to private applications while transitioning from legacy VPN-based connectivity to modern, policy-driven Zero Trust access models.

Responsibilities

• Collaborate with Enterprise ZTNA network, security, identity, and application teams

• Design, implement, and maintain Zscaler Private Access (ZPA) connectivity

• Configure and manage App Connectors, Server Groups, Application Segments, and access policies

• Analyze legacy VPN and network access models and translate them into ZPA-based access patterns

• Support onboarding of applications to ZPA, including validation of network paths, ports, and protocols

• Configure least-privileged access policies while minimizing operational impact

• Troubleshoot ZPA access, connectivity, and routing issues

• Support migration of users and applications from legacy access solutions to ZPA

• Ensure ZPA configurations align with security, governance, and compliance standards

• Maintain technical documentation, diagrams, configuration standards, and operational runbooks

• Coordinate with vendors and Zscaler support for issue resolution and optimization

• Communicate system status and risks to enterprise stakeholders

Required Skills and Experience

• Strong enterprise networking experience (routing, firewalls, DNS, traffic flow analysis)

• Hands-on experience with Zscaler Private Access (ZPA) or similar Zero Trust access platforms

• Solid understanding of Zero Trust Network Access (ZTNA) principles

• Experience translating complex, legacy network environments into scalable access models

• Experience working in regulated or compliance-driven environments

• Strong troubleshooting, documentation, and cross-team communication skills

Preferred Qualifications

• Zscaler certifications (Digital Transformation Administrator / Engineer)

• Completion of Zscaler ZPA-related training

• Industry certifications: CCNP, Security+, CySA+, or equivalent

• Experience in large, multi-agency or public-sector environments

• Familiarity with CJIS, NIST 800-53, or similar security frameworks

• Experience supporting enterprise access modernization initiatives