Overview

Job Title: Senior Zero Trust Engineer Zscaler ZPA/ZIA (Principal Consultant)Location: Atlanta, GA Hybrid (onsite Tuesday Thursday)The OpportunityWe're looking for a Principal Consultant to own enterprise Zero Trust initiatives end to end from strategic architecture through hands-on engineering, rollout, and ongoing operations anchored on Zscaler Private Access (ZPA). You'll set the technical direction while staying deep in the build: deployment, integration, policy tuning, and production support.The right person has lived and breathed Zero Trust Network Access (ZTNA), Secure Service Edge (SSE), and Secure Access Service Edge (SASE), and has repeatedly taken enterprises off legacy VPN and perimeter-based models onto cloud-delivered Zero Trust. This is an Atlanta-based role with three onsite days each week (Tuesday Thursday).What You Bring (Must-Have)A Bachelor's in Computer Science, Information Security, Engineering, or a comparable technical field or equivalent real-world experience.8 12+ years across network security, secure access, Zero Trust architecture, or enterprise security engineering.Deep, hands-on command of Zscaler Private Access (ZPA) and Zscaler Internet Access (ZIA).A solid grasp of Zero Trust Architecture (ZTA), ZTNA, SSE, and SASE.A track record designing enterprise-scale Zero Trust architectures and the migration paths to reach them.Sharp troubleshooting instincts and structured problem-solving.Comfort running design sessions and architecture reviews, and explaining complex decisions to both engineers and executives.The ability to juggle competing priorities without losing momentum.Core technical areas:Zero Trust & Security: Zscaler ZPA, Zscaler ZIA, Zero Trust Architecture, ZTNA, SSE/SASE, secure remote access, VPN migration, security policy design, application segmentationNetworking: TCP/IP, DNS, TLS/SSL, routing & switching, proxy architectures, firewall policy management, traffic-flow analysis, packet capture & troubleshootingIdentity & Access: Microsoft Entra ID (Azure AD), Active Directory, Multi-Factor Authentication (MFA), certificate managementCloud: integrating Zero Trust with Microsoft Azure and Amazon Web Services (AWS)Network Security Platforms: Palo Alto Networks Firewalls, Cisco Umbrella, SD-WAN, enterprise firewallsOperating Systems: Windows, Linux, macOSWhat You'll DoArchitecture & StrategyDrive the architecture, design, engineering, and rollout of enterprise Zero Trust built on Zscaler ZPA and ZIA.Build Zero Trust designs that scale to secure users, applications, and cloud workloads.Map out how large organizations move off traditional VPN and legacy remote access onto ZTNA.Create reusable architecture patterns, engineering standards, deployment playbooks, and operational guardrails.Design application segmentation that shrinks the attack surface and hardens posture.Engineering & OperationsConfigure, tune, and troubleshoot ZPA/ZIA policies, connectors, service edges, forwarding profiles, authentication, and traffic paths.Run advanced diagnostics spanning networking, identity, authentication, and endpoints.Provide technical leadership through enterprise deployments, migrations, and production support.Support environments with thousands of users, applications, and distributed sites.Leadership & CollaborationPartner with infrastructure, networking, cloud, identity, and security teams to ship integrated solutions.Lead technical conversations with engineers, architects, stakeholders, and leadership.Track emerging Zero Trust technology and recommend architectural moves that keep pace with best practice.Mentor junior engineers and act as the go-to subject-matter expert on Zero Trust.Nice-to-Have (Bonus Points)Having led enterprise-wide Zero Trust transformation programs.Experience taking large organizations from traditional VPN to ZTNA.A background securing hybrid and multi-cloud estates.Deployments involving thousands of users and applications under your belt.Fluency with security architecture framew