[Hiring] Zscaler Security Architect @NATIONMIND LLC

Role Description

We are currently hiring skilled professionals for the position of Zscaler Security Architect to join our growing team.

Key Responsibilities:

• Design and implement enterprise-scale Zscaler architectures supporting Zero Trust principles.
• Lead ZIA and ZPA deployment, migration, and optimization initiatives across global environments.
• Define secure internet access, private application access, SaaS security, and cloud access strategies.
• Develop SASE and Zero Trust roadmaps aligned with business, security, compliance, and operational goals.
• Conduct current-state architecture assessments and identify opportunities for modernization and risk reduction.
• Design secure access solutions for cloud, on-premise, hybrid, and remote workforce environments.
• Integrate Zscaler solutions with Identity Providers such as Microsoft Entra ID / Azure AD, Okta, Ping Identity, and other IAM platforms.
• Implement application segmentation strategies using ZPA and Zero Trust access policies.
• Design and govern URL filtering, CASB, Cloud Firewall, DLP, SSL inspection, sandboxing, and data protection policies.
• Support network transformation programs replacing or reducing dependency on traditional VPN architectures.
• Collaborate with network, cloud, IAM, endpoint, SOC, and GRC teams to implement effective security controls.
• Lead troubleshooting and remediation of complex Zscaler, traffic steering, authentication, and policy-related issues.
• Develop architecture standards, reference designs, HLDs, LLDs, migration plans, runbooks, and operational handover documents.
• Provide governance, risk, control, and compliance guidance related to Zscaler implementations.
• Mentor engineering teams and provide technical leadership for project delivery and managed services transition.

Qualifications

• Expert-level hands-on experience with Zscaler Internet Access (ZIA), Zscaler Private Access (ZPA), and Zscaler Digital Experience (ZDX).
• Strong understanding of Zero Trust, SASE, secure web gateway, cloud firewall, CASB, DLP, and traffic inspection concepts.
• Proven experience designing Zscaler architecture for large enterprise and global transformation programs.
• Ability to integrate Zscaler with IAM, endpoint, network, cloud, and SOC/security monitoring ecosystems.
• Experience preparing HLD/LLD, migration plans, implementation playbooks, test plans, and operational transition documents.
• Excellent customer-facing communication, stakeholder management, and technical presentation skills.

Requirements

• 10+ years of overall Cyber Security experience with architecture and consulting exposure.
• 5+ years of hands-on Zscaler architecture, design, deployment, and optimization experience.
• Experience leading global Zscaler or SASE transformation engagements.
• Strong knowledge of enterprise networking, cloud security, identity, and endpoint security integration.
• Ability to interact with executive stakeholders, customer security leadership, architects, and delivery teams.
• Experience in multi-vendor security environments and managed services transition.