ZTNA / Zero Trust Network Engineer(Zscaler) - Hybird 3 days

.

Location: Montreal or Alpharetta GA
About the Role
We are seeking an experienced ZTNA / Zero Trust Network Engineer to support a large-scale enterprise network and endpoint modernization program. You will help move an organization from a flat network to an application-aware Zero Trust Network Access model, working across ZTNA, DDI, and laptop modernization initiatives.

Key Responsibilities
Design, implement, and support enterprise ZTNA solutions
Migrate applications and users from traditional network access to Zero Trust architectures
Develop and implement application-level ZTNA policies
Troubleshoot application connectivity and network access issues
Analyze network traffic and packet flows to resolve complex connectivity problems
Integrate ZTNA with enterprise identity providers and MFA technologies, partnering closely with identity and access management teams
Automate infrastructure configuration and deployment at enterprise scale
Support DDI and broader network and endpoint modernization initiatives
Collaborate with infrastructure, security, endpoint, and application teams
Document designs, configurations, troubleshooting procedures, and standards
Required Experience
Hands-on Zero Trust / ZTNA architecture experience, including implementing or supporting ZTNA in a large organization
Experience with Zscaler, Netskope, or comparable ZTNA platforms
Strong networking fundamentals and application connectivity troubleshooting
Packet-level troubleshooting skills (e.g., Wireshark)
Experience with identity platforms such as Microsoft Entra ID or comparable
Solid understanding of OIDC, MFA, authentication, and authorization
Strong understanding of application networking and access control
Experience with PowerShell, Ansible, Infrastructure as Code, or comparable automation
Ability to turn networking requirements into scalable, automated solutions
Ideal Candidate
You have taken part in a large-scale Zero Trust transformation, ideally in an environment of 5,000+ users or endpoints, and are equally comfortable discussing networking, identity, security, application connectivity, and automation.

This is a specialist ZTNA role, not a general network engineer position.