---
title: 'Zscaler Solutions Architect SME at Agile Defense'
canonical: 'https://feeny.ai/job/zscaler-solutions-architect-sme-agile-defense-ashburn-njd4s5fq7ysa'
type: 'job'
last_seen: '2026-10-25'
---

# Zscaler Solutions Architect SME at Agile Defense

- **Company:** Agile Defense
- **Location:** Ashburn, VA
- **Compensation:** $170k–$185k
- **Work type:** hybrid
- **Posted:** 2026-10-22
- **Last confirmed live:** 2026-10-25
- **Apply:** https://jobs.lever.co/agile-defense/0ffc5b9c-5e29-4126-a3b0-35332b978a04

## Job description

Serve as a Zscaler Solutions Architect SME enabling the Department of Homeland Security (DHS) mission and enterprise network infrastructure. The applicant will serve as the primary technical authority for designing, deploying, administering, upgrading and optimizing enterprise-wide Secure Access Service Edge (SASE) solutions using the Zscaler cloud security platform. This role leads the operational architecture across Zscaler Internet Access (ZIA), Zscaler Private Access (ZPA), and Zscaler Digital Experience (ZDX), driving modern Zero Trust initiatives

The Zscaler Solutions Architect SME will be the technical lead performing the following: Architecture & Engineering: Design, implement, and maintain enterprise Zscaler deployments (ZIA, ZPA, ZDX, and Zscaler Client Connector) across multi-cloud and hybrid corporate environments. Policy & Governance: Create, audit, and tune security policies, including URL filtering, Cloud Application Control, SSL/TLS deep packet inspection, Data Loss Prevention (DLP), and sandbox policies. Zero Trust Deployment: Formulate and execute access policies within ZPA to enable least-privilege direct access to internal applications in private clouds (AWS, Azure, GCP) and on-premises data centers without traditional VPN overhead. Operational Troubleshooting: Serve as Tier-3/Tier-4 escalation support for complex proxy routing, PAC (Proxy Auto-Configuration) file debugging, identity integration, authentication drops, and application latency issues. Agent Lifecycle Management: Manage enterprise distribution, health checks, profile tuning, and version upgrades of Zscaler Client Connector (ZCC) across macOS, Windows, iOS, and Android platforms. Observability & Analytics: Leverage ZDX and cloud analytics to isolate user experience degradation across endpoint, network ISP, and application levels; configure automated alerting and SIEM log integration (Splunk, Cribl). Cross-Functional Integration: Partner with Identity and Access Management (IAM) teams to configure SAML/SCIM attributes with IdPs such as Okta, Microsoft Entra ID (Azure AD), or Ping Identity. Troubleshooting & Incident Management: Provide Tier 2/Tier 3 escalation support for network outages, circuit degradations, and performance issues; conduct root cause analyses (RCA) and coordinate vendor support. Documentation & Asset Management: Maintain accurate network diagrams (Visio), topology maps, inventory databases, standard operating procedures (SOPs), and change control tickets (ServiceNow/Remedy). Support On-Call & Escalation Management: support 24/7/365 on-call rotation readiness to respond to Tier 3 critical network incidents within SLA limits and coordinating cross-functional escalation pathways. When needed to restore services, the Senior Network Engineer will provide a solution and implement an Emergency Change Request (ECR), Emergency Break Fix (EBF), or Change Request. Root Cause Analysis (RCA) or Post Incident Reporting: Participate in the Root Cause Analysis (RCA) or post incident analysis of problems for mission critical applications, mission essential applications, and mission essential network infrastructure as well as recurring issues on the enterprise IT infrastructure. Project Support: Partner with program and project managers to align network engineering deliverables, milestone schedules, and resource planning with enterprise project objectives. Excellent problem-solving and analytical skills, with the ability to troubleshoot complex network issues. Scheduled and Adhoc Travel:  Ability to travel within the United States either on short notice or scheduled, up to 20% of the time.

Required

1. Must have a minimum of 5+ years of relevant experience

The candidate should have strong hands-on experience with:

- Zscaler Internet Access (ZIA): Security policies, URL filtering, SSL inspection, traffic forwarding, authentication, and advanced troubleshooting.
- Zscaler Private Access (ZPA): App Connectors, application segments, access policies, private application connectivity, and troubleshooting.
- Zscaler Client Connector (ZCC): Deployment, configuration, forwarding profiles, upgrades, endpoint compatibility, and troubleshooting.
- Zscaler Digital Experience (ZDX): Application performance monitoring, network path analysis, latency investigation, and troubleshooting.
- PAC Files: Advanced knowledge of JavaScript-based PAC files, proxy configurations, routing logic, and application-specific bypass requirements.
- PowerShell: Scripting and automation for troubleshooting and operational support.

1. Enterprise Networking and Advanced Troubleshooting

The ideal candidate should have strong knowledge of TCP/IP, DNS, routing, firewalls, VPNs, TLS/SSL, proxy architecture, and network traffic analysis.

The SME should be able to independently diagnose complex connectivity, authentication, application performance, and security policy issues; coordinate with other technical teams; and document root causes and corrective actions.

Certifications

- Zscaler ZIA administration certification or equivalent official training.
- Zscaler ZPA administration certification or equivalent official training.
- Zscaler ZDX training or relevant certification, where available.
- Cisco CCNA or CCNP.
- CompTIA Security+.
- Relevant Zscaler Zero Trust or advanced security training.

MUST BE ABLE TO PASS A CBP BI

## Nice to Have

Enterprise Applications and Technology Integration – Highly Desirable

Our environment includes a wide range of enterprise technologies and specialized applications. The SME should be comfortable investigating Zscaler-related connectivity, authentication, performance, and security policy issues involving:

- Security and monitoring: Splunk, Cribl, CrowdStrike, and Okta.
- Cloud platforms: AWS and Microsoft Azure.
- Developer tools: GitHub, Docker, Git, Visual Studio, VS Code, development repositories, APIs, and other enterprise development platforms.
- Mobile technologies: Mobile devices, mobile applications, wireless connectivity, VPN interactions, and mobile device management solutions.
- ZSIM: Connectivity and security troubleshooting involving ZSIM-related applications and infrastructure.
- WCTTV camera systems: Network connectivity, remote access, streaming, and security policy compatibility for camera-related services.
- Drone technologies: Connectivity and application access requirements associated with drone-related platforms, management software, and supporting services.

## About Agile Defense

## Company Overview
- **One-liner**: Agile Defense delivers advanced digital transformation, data analytics, and cybersecurity solutions to support critical national security and civilian missions.
- **Entity Type**: Private (owned by Enlightenment Capital; last private equity round in November 2022)
- **Headquarters**: McLean, Virginia, United States
- **Founded**: Year not publicly available
- **Founders**: Not publicly available

## Core Business
- **Primary industries**: IT Services and IT Consulting, National Security, Defense, Civilian Government
- **Target customers**: U.S. federal government (defense and civilian agencies), B2G (business-to-government)
- **Mission/Purpose**: “Bring adaptive innovation to support our nation’s most important missions through the seamless integration of advanced technologies, elite minds, and unparalleled agility.”

## Products & Services
- **Digital Transformation**: Applying advanced services, capabilities, and solutions securely to enhance mission operations and achieve optimal outcomes.
- **Data Analytics**: Leveraging a data-driven approach to deliver insights that accelerate decision-making.
- **Cyber**: Delivering Cyber Systems and Cyber Operations capabilities to defend against advanced and emerging cyber threats.

## Market Standing
- **Valuation/Market Cap**: Not disclosed (private company)
- **Key Metric**: Annual revenue of $110M (as of latest data); 816 employees ( -7.4% YoY)
- **Notable Investors/Partners**: 
  - **Investor**: Enlightenment Capital (private equity sponsor)
  - **Partners**: AWS, Microsoft, Atlassian, ServiceNow, Snowflake, CrowdStrike, Splunk, Red Hat, GitLab, and many more.
- **Growth Signals**: 
  - Headcount declined 7.4% year-over-year, but job postings increased 133.9% year-over-year.
  - Active job postings: 131 (as of Sep 2026).
  - Recognized as Washington Post Top Work Places 2023, 2024, and 2026.
  - ISO 9001, ISO 20000-1, ISO 27001 certified; CMMI DEV/SVC ML3 appraised.

## Competitive Advantages
- **Certifications & Compliance**: ISO 9001, 20000-1, 27001; CMMI ML3; critical for government contracts.
- **Extensive Partner Ecosystem**: Ties with major cloud/platform providers (AWS, Microsoft, ServiceNow, etc.) and security vendors (CrowdStrike, Splunk, Recorded Future).
- **Mission Focus**: Deep expertise in national security and civilian missions, with global presence (North America, Europe, Asia, Middle East).
- **Award-Winning Culture**: Consecutive Washington Post Top Workplaces recognition reinforces employer brand.

## Strategic Focus
- Scaling digital transformation, data analytics, and cyber capabilities for U.S. government clients.
- Investing in innovation through “Agile Labs” and research.
- Expanding hiring in key technical areas (Data Scientist, Splunk Architect, Cyber Incident Handler, AI SME).

## Why Work Here
- **Culture**: Emphasizes teamwork, collaboration, and “elite teams” working on high-impact national security projects.
- **Work Policy**: Some roles are listed as “Remote – Regular Remote” (e.g., certain positions on Lever job board), but many roles likely require clearance and on-site work.
- **Benefits**: Competitive health plans, education and certification reimbursement, paid parental leave, PTO, fitness reimbursement, employee assistance program, referral bonuses up to $2,500.
- **Recognition**: Washington Post Top Work Places 2023, 2024, 2026; Glassdoor rating 3.9/5 (287 reviews) with work-life balance 4.1/5.
- **Professional Development**: Knowledge-sharing sessions, team-building activities, ongoing training.

## Sources
1. [Agile Defense About Page](https://agiledefense.com/about/)
2. [Agile Defense LinkedIn](https://linkedin.com/company/agiledefense)
3. [Agile Defense Careers Page](https://agiledefense.com/careers/)
4. [Agile Defense Open Positions (Lever)](https://jobs.lever.co/agile-defense)

## Other roles at Agile Defense

- [Data Engineer](https://feeny.ai/job/data-engineer-agile-defense-omaha-c1gy457khhgt) — Omaha, NE
- [Data Engineer - DC](https://feeny.ai/job/data-engineer-dc-agile-defense-washington-0c8gmz1f54hb) — Washington, DC
- [Data Engineer - Tampa](https://feeny.ai/job/data-engineer-tampa-agile-defense-macdill-afb-40skv535m1rd) — Macdill Afb, FL
- [Data Engineer - Stuttgart](https://feeny.ai/job/data-engineer-stuttgart-agile-defense-stuttgart-0xb17g0smzn2) — Stuttgart, Germany
- [Data Engineer - Omaha](https://feeny.ai/job/data-engineer-omaha-agile-defense-offut-afb-4xv1j8g4cydp) — Offut Afb, NE
- [Data Engineer - St. Louis](https://feeny.ai/job/data-engineer-st-louis-agile-defense-scott-afb-d5qww048qdwk) — Scott Afb, IL
- [Data Engineer - Fort Meade](https://feeny.ai/job/data-engineer-fort-meade-agile-defense-fort-meade-8g9hp0apyhgz) — Fort Meade, MD
- [Data Engineer - Falls Church](https://feeny.ai/job/data-engineer-falls-church-agile-defense-falls-church-5veqmnna6z3t) — Falls Church, VA
- [Data Engineer - Doral](https://feeny.ai/job/data-engineer-doral-agile-defense-doral-9a4yhggmtsxs) — Doral, FL
- [Data Engineer - Arlington (VA)](https://feeny.ai/job/data-engineer-arlington-va-agile-defense-arlington-drkeaabrycbr) — Arlington, VA