below marketmost similar roles pay hereabove market
This role pays less than
74%
of similar roles. Most pay
$146,275–$209,100
— the blue band above.
At the midpoint, this role pays about
$147k
versus about
$178k
for comparable roles.
Based on 240 similar postings.
Employer
About CoStar Group
CoStar Group is the leading provider of commercial real estate information, analytics, and online marketplaces, including CoStar, Apartments.com, and LoopNet platforms. Industry: Commercial Real Estate Data & Analytics
CoStar Group currently has
59 open roles
on FindRole.
Listed pay typically runs
$133,000–$190,000
across 59 roles with salary data.
JOB TITLE: Senior Zero Trust Network Access (ZTNA) Engineer- Arlington, VA
The Senior Zero Trust Network Access (ZTNA) Engineer joins the zero-trust engineering team to provide expertise in the architecture, implementation, and operation of cloud-delivered ZTNA and Security Service Edge (SSE) platforms. This role involves designing, deploying, and optimizing enterprise security policies, including traffic steering and application segmentation. The engineer will lead migrations from traditional VPNs to modern cloud platforms and serve as a technical escalation point for complex connectivity, authentication, and routing issues. Key responsibilities include performing packet-level analysis and integrating platforms with identity providers like Entra ID and Okta. Required skills include proficiency in TCP/IP, DNS, and TLS, alongside experience with tools like Wireshark, PowerShell, and Python to automate tasks and resolve performance issues across global enterprise networks.
Design, deploy, and optimize enterprise ZTNA and Security Service Edge (SSE) platforms like Zscaler or Netskope.
Manage security policies including traffic steering, application segmentation, and access controls.
Lead migrations from traditional VPNs and on-premises security architectures to modern cloud-delivered ZTNA platforms.
Serve as the senior technical escalation point for complex connectivity, authentication, and routing issues.
Perform packet-level and session-level analysis using tools like Wireshark and TCPDump to diagnose network problems.
Integrate ZTNA platforms with enterprise identity providers such as Entra ID and Okta.
Automate operational, monitoring, and reporting tasks using PowerShell and Python.
Create architecture diagrams, engineering standards, and standard operating procedures for ZTNA services.
What we're looking for
Bachelor’s Degree from an accredited, not-for-profit, in-person university or college.
7+ years of progressive experience in enterprise networking, network security engineering, or related infrastructure engineering roles.
3+ years of hands-on experience implementing, operating, and supporting enterprise ZTNA or SSE platforms.
Expert-level knowledge of TCP/IP, DNS, DHCP, routing, NAT, TLS, proxies, VPN technologies, firewalls, and application traffic flows.
Proven ability to use packet captures, flow data, routing tables, firewall sessions, endpoint telemetry, and platform logs to isolate complex problems.
Experience leading Tier-3 incident response and root-cause analysis for business-critical services.
Experience independently designing and implementing highly available enterprise network or security services.
Relevant industry or vendor certifications such as Zscaler ZCCA/ZCCP, Netskope NCCSA/NCCSP, Palo Alto PCNSE, Cisco CCNP, or Microsoft Azure Network Engineer Associate (preferred).