Freelance Zscaler Zero Trust Branch (ZTB) Delivery Engineer

Job Title: Freelance Zscaler Zero Trust Branch (ZTB) Delivery Engineer

Employment Type: Freelance / Contract

Work Location: Remote

Experience Required: 5+ Years

About the Role

We are seeking an experienced Zscaler Zero Trust Branch (ZTB) Delivery Engineer to lead the implementation and deployment of Zero Trust Branch and SD-WAN solutions for enterprise customers. This role is ideal for professionals with strong expertise in networking, cybersecurity, SD-WAN technologies, and customer-facing solution delivery.

As a Delivery Engineer, you will be responsible for owning branch transformation projects from planning and design through deployment, migration, and optimization. You will work closely with customer stakeholders to modernize branch infrastructure by replacing traditional MPLS, VPN, router, and firewall architectures with a cloud-delivered Zero Trust framework powered by Zscaler.

Key Responsibilities

Solution Delivery & Ownership

• Lead end-to-end Zscaler Zero Trust Branch deployments.
• Own technical delivery, implementation timelines, and project success.
• Conduct requirements gathering, site assessments, and architecture validation.
• Coordinate appliance staging, deployment, and cutover activities.
• Ensure successful execution of branch transformation initiatives.

Network & Security Deployment

• Configure and deploy Zscaler Zero Trust Branch physical and virtual appliances.
• Implement Zero Touch Provisioning (ZTP) for branch onboarding.
• Configure WAN connectivity, VLANs, routing, and high-availability solutions.
• Deploy and troubleshoot IPSec and GRE tunnels.
• Configure routing protocols including BGP, OSPF, and static routing.
• Support cloud security integrations utilizing ZIA and ZPA.

Security & Zero Trust Architecture

• Implement Zero Trust Network Access (ZTNA) principles.
• Support micro-segmentation and secure branch connectivity.
• Assist in migration from traditional network security architectures to cloud-delivered security models.
• Validate security policies and traffic steering configurations.

Troubleshooting & Optimization

• Troubleshoot routing, connectivity, and tunnel-related issues.
• Perform packet capture analysis and network diagnostics.
• Utilize Linux-based troubleshooting tools and CLI utilities.
• Validate performance, resiliency, and operational readiness of deployed solutions.

Documentation & Stakeholder Management

• Create High-Level Designs (HLDs), Low-Level Designs (LLDs), runbooks, and implementation documentation.
• Provide regular project updates to customers and stakeholders.
• Support migration planning and legacy infrastructure decommissioning.
• Ensure delivery quality and adherence to project standards.

Required Skills & Experience

• 5+ years of experience in Network Engineering, Security Engineering, SD-WAN, or Solution Delivery.
• Hands-on experience with Zscaler technologies including ZIA, ZPA, and Zero Trust Branch.
• Experience deploying enterprise SD-WAN solutions.
• Strong knowledge of:
• BGP
• OSPF
• VLANs
• NAT
• QoS
• IPSec
• GRE Tunneling
• High Availability (HA)
• Experience with one or more SD-WAN platforms:
• Cisco Viptela
• Cisco Meraki
• VMware VeloCloud
• Aruba EdgeConnect (Silver Peak)
• Versa Networks
• Fortinet SD-WAN
• Palo Alto Prisma SD-WAN
• Familiarity with Linux networking and troubleshooting tools.
• Understanding of Zero Trust Architecture, ZTNA, and Network Segmentation.
• Experience with Identity Providers such as Azure AD (Entra ID) and Okta.
• Strong customer-facing communication and documentation skills.

Preferred Qualifications

• Experience delivering multi-site enterprise deployments.
• Experience migrating customers from MPLS, VPN, router, or firewall-based architectures.
• Knowledge of cloud security and modern branch networking architectures.
• Relevant certifications in Zscaler, Cisco, Fortinet, or networking technologies are advantageous.

What Success Looks Like

• Successful delivery of branch transformation projects on time and within scope.
• Seamless migration from legacy networking solutions to Zero Trust architecture.
• High-quality documentation and deployment standards.
• Strong customer satisfaction and minimal post-deployment escalations.
• Consistent adherence to security and operational best practices.