Zero Trust Network Engineer

Job Title: ZTNA / Zero Trust Network Engineer

Location: Alpharetta, GA (Preferred) / Montreal, QC
Duration: 12 Months

Job Summary

We are seeking an experienced ZTNA (Zero Trust Network Access) Engineer with strong hands-on experience implementing and deploying Zero Trust Network Access solutions at enterprise scale. The ideal candidate will have proven experience with platforms such as Zscaler Private Access (ZPA), Netskope, or similar ZTNA technologies, including large-scale rollouts, configuration, integration, troubleshooting, and ongoing optimization.

Key Responsibilities

• Design, implement, configure, and support enterprise ZTNA solutions aligned with Zero Trust security principles.
• Lead and support large-scale ZTNA deployments and migrations across enterprise environments.
• Configure and manage ZTNA platforms such as Zscaler ZPA, Netskope, or equivalent solutions.
• Integrate ZTNA solutions with identity providers, MFA, SSO, endpoint security, and existing network infrastructure.
• Implement secure, identity-based access policies for users, applications, and devices.
• Troubleshoot connectivity, authentication, application access, and policy-related issues.
• Collaborate with network, cybersecurity, infrastructure, and IAM teams to ensure seamless deployment.
• Monitor performance, investigate incidents, and optimize security policies and configurations.
• Develop technical documentation, deployment plans, configuration standards, and operational procedures.
• Ensure compliance with enterprise security standards and Zero Trust architecture principles.

Required Qualifications

• Strong hands-on experience with ZTNA / Zero Trust Network Access implementations.
• Proven experience participating in or leading a large-scale enterprise ZTNA rollout.
• Experience with Zscaler ZPA, Netskope, or similar ZTNA platforms.
• Strong understanding of Zero Trust architecture, secure remote access, and application-level access controls.
• Experience with SSO, MFA, identity providers, and role-based access policies.
• Solid understanding of networking fundamentals, including TCP/IP, DNS, routing, firewalls, and VPN technologies.
• Strong troubleshooting, analytical, and communication skills.
• Ability to work collaboratively with security and infrastructure teams.

Preferred Qualifications

• Experience migrating from traditional VPN solutions to ZTNA.
• Experience with enterprise identity platforms such as Microsoft Entra ID, Okta, or Active Directory.
• Familiarity with endpoint security, device posture checks, and conditional access.
• Relevant vendor certifications in Zscaler, Netskope, or network security are a plus.

Ideal Candidate Profile

We are looking for a hands-on engineer who has implemented ZTNA in a large enterprise environment, rather than someone with only general network security or theoretical Zero Trust knowledge. Candidates located in Alpharetta, GA, or Montreal, QC are preferred.