Job Description
Overview
Role: Zscalar and Zero Trust Solution Engineer
Reports to: Client Services Program Manager
Work Hours: 40 hour week
OnPoint, a wholly-owned subsidiary of Sapient Government Services, is a vibrant, energetic, and growing ISO-certified technology and management consulting partner that provides critical thinking, strategic analysis, and thought leadership in a collaborative environment in an enduring effort to improve performance, lower costs, and achieve results for clients. We are guided by our principles:
Clarity. Action. Results—for each client engagement we work to gain clarity, move into action, and achieve results. OnPoint specializes in delivering solutions in Cybersecurity, Enterprise Systems & Implementation Management, Cloud Architecture & Infrastructure Services, and Digital Communications & Strategic Marketing.
Job Description
Summary/Objective
- We are seeking a highly skilled Senior Cybersecurity & Infrastructure Engineer to design, implement, and support secure enterprise infrastructure with a strong focus on Zero Trust architecture and Zscaler cloud security platforms. This role bridges traditional infrastructure engineering and modern cybersecurity practices, ensuring resilient, scalable, and secure systems across on-premises and cloud environments.Responsibilities
- Cybersecurity & Zero Trust
- Design, implement, and maintain Zero Trust security architecture across enterprise networks and applications
- Implement and manage Zscaler services (ZIA (Internet Access), ZPA (Private Access), ZDX (Digital Experience), CASB (Cloud Access Security Broker)) to secure user, application, and data access
- Develop and enforce security policies aligned with Zero Trust principles (least privilege, continuous verification)
- Monitor security events, investigate incidents, and coordinate remediation efforts
- Partner with GRC (Governance, Risk, Compliance) teams to support compliance frameworks (NIST, ISO 27001, SOC 2)
- Experience completing or optimizing existing Zero Trust implementations (vs. greenfield deployments)
- Ability to apply Zero Trust principles and tools to AI workloads and support AI enablement and deployments
- Demonstrated ability to drive adoption with skeptical user populations
- Familiarity with additional Zero Trust tools beyond Zscaler, notably Palo Alto Prisma and Cloud Flare
- Infrastructure & Cloud
- Engineer and support enterprise infrastructure across on-prem, cloud (AWS, Azure, or GCP), and hybrid environments
- Integrate security controls into network, server, and cloud infrastructure designs
- Maintain and optimize identity and access management (IAM) integrations (SSO, MFA, IdP such as Azure AD or Okta)
- Collaborate with networking teams on routing, firewalls, VPN replacements, and secure connectivity models
- Automate infrastructure and security configurations using IaC tools (Terraform, ARM, Cloud Formation)
- Experience producing RMF-aligned documentation and supporting ATO processes
- Comfort operating in challenging environments and edge cases (OCONUS, low-bandwidth, BYOD, mixed identity, ZT applied to IOT, legacy app integration, hybrid identity, etc.) Qualifications
- Required Qualifications
- 5+ years of experience in cybersecurity, infrastructure, or network engineering
- Hands-on experience with Zscaler (ZIA and ZPA required; ZDX/CASB preferred)
- Strong understanding of Zero Trust architecture and frameworks
- Solid knowledge of enterprise networking (TCP/IP, DNS, routing, firewalls)
- Experience securing cloud and hybrid environments
- Familiarity with endpoint security, logging, and SIEM platforms
- Understanding of RMF, AI RMF, FedRAMP, FISMA, CISA Zero Trust Maturity Model, NSA ZIGs, and agency-specific implementation challenges
- Track record of knowledge transfer and building client capacity
- Applying change management methods, engaging with senior leadership, leading discovery sessions, managing client relationships, etc. (i.e., soft skills)
- Preferred Qualifications
- Zscaler certifications (ZCCP, ZCSE)
- Experience migrating from legacy VPNs to Zero Trust solutions
- Cloud security experience (AWS Security Hub, Azure Defender, or equivalent)
- Scripting or automation skills (Python, Power Shell, Bash)
- Experience with EDR/XDR platforms (Crowd Strike, Sentinel One, Microsoft Defender)
- Ability to use project and performance management skills to plan and deliver zero trust services. Other
- Federal and/or Commercial experience
- Technical troubleshooting support
- Hybrid or remote work environment
- Preferred: DoD Security Clearance
- Self-motivated
- Ability to maintain an extreme sense of urgency in all interactions with the customer
- Exceptional email management and written communication skills
- Solution-oriented
- Ability to research, analyze, and create viable solutions
- Strong technical attitude and ability to quickly learn and apply technical knowledge
- Excellent troubleshooting and problem-solving skills
- Ability to multi-task Additional Details
- Supervisory Responsibility: This position has no supervisory responsibilities.
- Remote/hybrid work environment.
- Physical Demands: While…
Apply Now
Apply Now