Sr. Cyber Security Architect

About the role

The Senior Cyber Security Architect will lead the design of secure hybrid connectivity for a global enterprise, focusing on Zscaler Internet Access (ZIA) and Zscaler Private Access (ZPA). The role combines deep technical expertise with strategic alignment to zero‑trust principles, ensuring protection for users and applications across a distributed workforce.

Key responsibilities

• Design end‑to‑end security architectures that integrate ZIA and ZPA, meeting enterprise‑scale performance and reliability requirements.
• Develop zero‑trust network access strategies to reduce attack surface while enabling secure remote access to internal applications.
• Evaluate existing security controls, identify gaps, and recommend Zscaler‑driven solutions for threat prevention and data protection.
• Configure ZIA policies (web filtering, cloud firewall, advanced threat protection) and ZPA application segmentation to enforce consistent security posture.
• Collaborate with network, cloud, and identity teams to ensure seamless Zscaler integration with logging and endpoint tools.
• Create architecture diagrams, standards, and reference implementations for global deployment.
• Conduct risk assessments and threat modeling, translating findings into actionable Zscaler policy changes.
• Support incident response by analyzing Zscaler alerts and refining detection rules.

Required profile

• 12–14 years of hands‑on experience in enterprise cyber security architecture, especially in hybrid environments.
• Proven track record designing, deploying, and tuning ZIA and ZPA solutions at scale.
• Strong understanding of zero‑trust principles, secure web gateways, and cloud access security concepts.
• Experience with security operations, incident response, and security monitoring.

Required skills

• Zscaler Internet Access (ZIA)
• Zscaler Private Access (ZPA)
• Zero‑Trust Network Access (ZTNA)
• Network routing, proxies, DNS, firewall fundamentals
• Identity and Access Management (IAM) integration
• Security Operations Center (SOC) processes
• Incident response and threat modeling
• Infrastructure as Code (IaC) for security automation