Zscaler Private Access (ZPA) Engineer

About the Role:

We are seeking an experienced Zscaler Private Access (ZPA) Engineer to lead and support the rollout of ZPA across multiple security zones and national subsidiaries. This role focuses on designing, deploying, and operating ZPA as a secure, scalable replacement for traditional VPN access, while providing expert consulting and troubleshooting support throughout the rollout lifecycle.

You will work closely with network security, infrastructure, and application teams to ensure secure private application access aligned with Zero Trust principles.

Locations: Poland, Ukraine.

Working hours: 7AM to 8PM German time (“follow-the sun” model).

Key Responsibilities:

ZPA Design & Configuration:

• Design and create ZPA configurations aligned with enterprise security standards and Zero Trust architecture.
• Define application segments, access policies, and trust boundaries within ZPA.
• Translate business and application access requirements into secure ZPA policies.

ZPA Connector Deployment:

• Deploy and configure ZPA Connectors across:
• Security zones
• Data centers
• National subsidiaries / regional environments
• Ensure high availability, resilience, and optimal traffic flow.
• Coordinate connector placement with network and infrastructure teams.

Security Policy & Access Control:

• Design and implement ZPA security policies, including:
• User-to-application access rules
• Identity-based access controls
• Least-privilege access models
• Integrate ZPA with identity providers (IdP) and authentication mechanisms where applicable.

Rollout Support & Troubleshooting:

• Perform error analysis and troubleshooting during ZPA rollout and migration phases.
• Diagnose connectivity, authentication, and application access issues.
• Support phased migrations from legacy VPN solutions to ZPA.
• Provide post-go-live support and stabilization.

Consulting & Stakeholder Support:

• Act as a ZPA subject matter expert (SME) for internal teams and stakeholders.
• Provide guidance on best practices, architecture decisions, and rollout strategies.
• Support documentation, knowledge transfer, and operational handover.

Required Skills & Experience

Technical Skills:

• Hands-on experience with Zscaler Private Access (ZPA) design and implementation.
• Strong understanding of Zero Trust Network Access (ZTNA) concepts.
• Experience deploying ZPA Connectors in enterprise environments.
• Solid knowledge of networking fundamentals (TCP/IP, DNS, routing, firewalls).
• Experience with application access models (client-based and browser-based access).