Zscaler Security Architect

• Practice - CIS - Cloud, Infrastructure, and Security Services
• Design and maintain enterprise Zero Trust security architectures spanning identity, endpoints, applications, networks, cloud platforms, and data access pathways.
• Architect secure connectivity solutions including cloud VPN, site-to-site VPN, remote access, ZTNA, and hybrid-cloud access models.
• Design, implement, and optimize Zscaler capabilities including Secure Internet Access (ZIA), Private Access (ZPA), DLP, traffic inspection, threat prevention, and policy enforcement.
• Define identity-aware access models based on least-privilege principles and Zero Trust security frameworks.
• Lead secure integration and connectivity planning for new business platforms and enterprise technology initiatives.
• Architect network, application, and security integration strategies for mergers and acquisitions, including discovery, segmentation, access controls, migration planning, and target-state architecture development.
• Conduct threat modeling, security risk assessments, and architecture reviews focused on access flows, trust boundaries, and data protection requirements.
• Develop architecture standards, reference architectures, design patterns, implementation roadmaps, and reusable security artifacts.
• Collaborate with cloud engineering, infrastructure, security, and application teams to embed security controls and governance requirements into technology solutions.
• Evaluate and recommend Zscaler, SASE, SSE, VPN, and Zero Trust technologies based on business, security, scalability, and operational requirements.
• Provide architecture oversight, design reviews, and implementation guidance to ensure solutions align with enterprise security standards.
• Define and monitor security metrics, effectiveness measurements, and continuous improvement initiatives to strengthen enterprise security posture.
• What you need to have to be considered
• 8+ years of experience in Security Architecture, Network Security, Cloud Security, or Enterprise Security Engineering roles.
• Strong expertise in Zero Trust Architecture, Zero Trust Network Access (ZTNA), Identity-Aware Access Controls, and Secure Connectivity solutions.
• Extensive hands-on experience with Zscaler technologies including ZIA, ZPA, DLP, policy management, and cloud-delivered security services.
• Experience designing enterprise cloud VPN, remote access, hybrid-cloud networking, and secure connectivity architectures.
• Strong understanding of SASE, SSE, cloud-native security architectures, and modern network security principles.
• Experience working with AWS, Azure, or multi-cloud environments, including cloud security, networking, identity, and connectivity services.
• Strong knowledge of enterprise identity systems, federation, MFA, RBAC, and least-privilege access models.
• Experience supporting M&A security integration initiatives and enterprise-scale network transformation projects.
• Deep understanding of security frameworks and compliance requirements including PCI-DSS, SOX, GDPR, and Zero Trust best practices.
• Strong architecture documentation, stakeholder management, communication, and technical leadership skills.

None flagged.