Senior Zero Trust Network Access (ZTNA) Engineer- Arlington, VA
Core
Design, deploy, configure, operate, and optimize enterprise Zero Trust Network Access (ZTNA) and Security Service Edge (SSE) platforms to provide secure, reliable access for a global workforce.
Role type
Senior hands-on IC network security engineer (ZTNA/SSE)
Builds
Cloud-delivered ZTNA and SSE platforms (Zscaler, Netskope, Cloudflare, Palo Alto Prisma Access, Cisco Secure Access)
Domain
Enterprise network security, cloud security, identity integration
Required skills
ZTNA/SSE platform administration, TCP/IP, DNS, DHCP, routing, NAT, TLS, proxies, VPN technologies, firewalls, packet capture analysis, flow data analysis, root-cause analysis, incident response, automation scripting, architecture design
Preferred skills
Enterprise-scale ZTNA migrations, Entra ID/Okta/SIEM integration, cloud networking (Azure/AWS/GCP), major-incident remediation
Technologies
Zscaler, Netskope, Cloudflare, Palo Alto Prisma Access, Cisco Secure Access, Wireshark, TCPDump, PowerShell, Python, Entra ID, Okta, SIEM, Azure, AWS, Google Cloud Platform
Responsibilities
Design and manage ZTNA security and access policies; Lead migrations from traditional VPN to modern cloud-delivered ZTNA platforms; Serve as a senior technical escalation point for complex connectivity and performance issues; Perform packet-level and session-level analysis to diagnose end-to-end traffic path problems; Lead technical response during high-impact incidents; Automate operational tasks using PowerShell and Python; Provide technical guidance and mentorship to other engineers.
Seniority
Senior, hands-on IC
