Cyber Security Architect

Job Summary

This hybrid role for an experienced cyber security architect focuses on designing implementing and optimizing secure access solutions centered on Zscaler Internet Access and Zscaler Private Access for a large global enterprise. The architect will ensure resilient secure connectivity align security controls with business objectives and continuously strengthen the organization cyber posture to safeguard data systems and users while supporting day operations.

Responsibilities

• Design and architect secure internet and private application access solutions using Zscaler Internet Access and Zscaler Private Access to protect enterprise users applications and data while ensuring consistent performance across hybrid work environments.
• Evaluate existing network and security architectures and propose detailed Zscaler based transformation roadmaps that improve threat protection reduce attack surface and streamline secure connectivity for day to day business operations.
• Configure and optimize Zscaler Internet Access policies including secure web gateway controls advanced threat protection and data protection rules to balance risk reduction with user experience and business productivity.
• Configure and optimize Zscaler Private Access architectures including application segmentation granular access policies and integrations with identity providers to deliver secure zero trust remote access without reliance on traditional virtual private network solutions.
• Collaborate with network infrastructure and application teams to integrate Zscaler platforms with routing directory services and logging systems so that secure access controls are consistently applied across on premise and cloud environments.
• Develop and maintain detailed technical design documents standards and configuration baselines for Zscaler Internet Access and Zscaler Private Access deployments to ensure repeatable implementation and operational stability.
• Conduct security risk assessments focused on internet and private access pathways and translate findings into actionable Zscaler policy changes that close gaps mitigate emerging threats and support regulatory and internal compliance expectations.
• Implement robust monitoring and alerting for Zscaler platforms using integrated logging and analytics tools to quickly detect anomalies investigate security events and support incident response activities.
• Provide technical guidance to operations and support teams on Zscaler features configuration changes and troubleshooting practices so that production environments remain stable and security incidents are handled efficiently.
• Coordinate and execute user access and traffic migration plans to Zscaler solutions with clear communication testing and fallback steps to minimize disruption while enhancing security posture for distributed workforce scenarios.
• Review and refine access control models authentication flows and policy structures to align Zscaler deployments with zero trust principles reducing lateral movement opportunities and strengthening protection for business critical applications.
• Champion secure by design practices in projects that rely on internet and private access by advising on Zscaler capabilities recommending secure patterns and ensuring architecture decisions support long term resilience and innovation.
• Analyze platform metrics and user feedback to identify optimization opportunities in Zscaler Internet Access and Zscaler Private Access usage driving continuous improvement that benefits the company service quality and contributes to safer digital interactions across society.

Qualifications

• Demonstrate extensive hands on experience designing and implementing large scale Zscaler Internet Access solutions including policy design integration with identity platforms and performance tuning in complex enterprise environments.
• Demonstrate strong practical expertise with Zscaler Private Access including application discovery micro segmentation strategies and secure connectivity patterns for hybrid and cloud hosted workloads.
• Possess deep knowledge of network security concepts such as secure web gateway controls firewalling proxy technologies transport layer security domain name system security and zero trust architectures relevant to secure access design.
• Possess solid understanding of enterprise networking fundamentals including routing switching virtual private network alternatives network address translation and load balancing to integrate Zscaler solutions effectively without degradation of service.
• Apply experience with security monitoring and incident response using logs and analytics from secure access platforms to investigate threats support forensics and recommend durable improvements to policies and configurations.
• Apply familiarity with regulatory and industry security standards and demonstrate ability to translate compliance requirements into practical Zscaler policies and technical controls that support organizational obligations.