Senior Cybersecurity Architect

Role Overview

We are seeking a Senior Cybersecurity Architect with expertise in Zero Trust, Zscaler (ZIA/ZPA), Network Security, and Cloud Security to design, implement, and migrate enterprise security solutions. The role involves leading migrations from legacy VPNs to Zscaler while collaborating with networking, cloud, and security teams.

Key Responsibilities

• Design and implement Zero Trust and SASE/SSE architectures.
• Lead migration from Fortinet, Cisco, or Palo Alto VPNs to Zscaler ZIA & ZPA.
• Deploy and manage App Connectors, Private Service Edge, and Client Connector.
• Integrate Zscaler with Microsoft Entra ID (Azure AD), Intune, SSO, MFA, and SCIM.
• Configure enterprise security policies, secure remote access, and SIEM integrations.
• Create HLDs, LLDs, implementation, and migration documentation.
• Support deployment, validation, and post-production operations.
• Collaborate with infrastructure, cloud, and security teams to enhance enterprise security.

Required Skills

• Zscaler: ZIA, ZPA, Private Service Edge, App Connectors
• Security: Zero Trust, SASE/SSE, IAM, WAF, SIEM
• Network: Palo Alto, Fortinet, Cisco Firewalls, SD-WAN, VPN, SSL Inspection, TCP/IP, DNS, NAT
• Cloud & Identity: Azure/AWS, Microsoft Entra ID, Intune, SAML, OAuth, OIDC, MFA
• Automation (Preferred): Python, Ansible

Experience

• 5+years in Cybersecurity/Network Security.
• 3–5+ years of hands-on experience with Zscaler ZIA & ZPA.
• Experience in Zero Trust implementations, VPN-to-Zscaler migrations, enterprise networking, and cloud security.
• Strong documentation and architecture design experience (HLD/LLD).

Preferred Certifications

• CISSP, CCSP
• CCNA / CCNP Security
• Zscaler: ZCCA, ZCDS, ZCA
• Fortinet FCP/NSE
• Palo Alto PCNSA/PCNSE

Nice to Have

• AWS/Azure networking
• DevSecOps & Infrastructure as Code (IaC)
• Agile/Scrum experience
• Strong communication and stakeholder management skills