Senior Network Engineer role at DHS enterprise providing Tier 3/4 technical leadership on Zscaler SASE platform deployments and Zero Trust network modernization. This position combines hands-on architecture, policy governance, and 24/7 incident response for mission-critical federal infrastructure.
What you'll do
- Design, implement, and maintain enterprise Zscaler deployments (ZIA, ZPA, ZDX) across multi-cloud and hybrid environments serving DHS mission systems
- Create, audit, and tune advanced security policies including URL filtering, Cloud Application Control, SSL/TLS deep packet inspection, DLP, and sandbox configurations
- Formulate and execute Zero Trust access policies in ZPA to enable least-privilege direct access to internal applications across private clouds and on-premises data centers
- Serve as Tier 3/4 escalation authority for complex network troubleshooting including proxy routing, PAC debugging, identity integration failures, and application latency issues
- Manage Zscaler Client Connector lifecycle (deployment, health checks, version upgrades) across Windows, macOS, iOS, and Android platforms enterprise-wide
- Provide 24/7/365 on-call support for critical network incidents, coordinate vendor escalations, and conduct root cause analyses within SLA requirements
- Partner with IAM teams to configure SAML/SCIM integration with identity providers (Okta, Microsoft Entra ID, Ping Identity) and maintain network documentation (Visio, ServiceNow/Remedy)
Mission
This role directly supports the Department of Homeland Security (DHS) enterprise network infrastructure modernization, enabling secure cloud-first and hybrid multi-cloud operations across AWS, Azure, and GCP while maintaining on-premises data center connectivity without traditional VPN overhead.
Required skills
- Zscaler platform (ZIA, ZPA, ZDX, Client Connector)
- Zero Trust architecture and deployment
- Enterprise network design and optimization
- Security policy creation and DLP/SSL-TLS inspection
- Identity and access management integration (SAML, SCIM, Okta, Entra ID)
- Cloud platforms (AWS, Azure, GCP)
- SIEM integration (Splunk, Cribl)
- Network troubleshooting and root cause analysis
- Proxy configuration and PAC file management
- Change management (ServiceNow, Remedy)