Principal Zero Trust Architect

Role

Principal Zero Trust Architect – (Zscaler ZPA/ZIA)

Atlanta, GA (Hybrid – Onsite Tuesday to Thursday)

USC, H4-EAD, L2S and TN Only

W2

Contract to Hire – Long Term

• Design, architect, implement, and support enterprise Zero Trust solutions using Zscaler Private Access (ZPA) and Zscaler Internet Access (ZIA).
• Lead enterprise-wide migration from traditional VPN and legacy remote access solutions to Zero Trust Network Access (ZTNA).
• Design scalable Zero Trust architectures to secure users, applications, and cloud workloads.
• Configure, deploy, and troubleshoot ZPA/ZIA components including App Connectors, Service Edges, Forwarding Profiles, Authentication Policies, and Traffic Forwarding.
• Develop application segmentation strategies to reduce attack surface and improve security posture.
• Create architecture standards, deployment playbooks, implementation guides, and operational best practices.
• Troubleshoot complex issues involving networking, authentication, identity, endpoints, and cloud integrations.
• Collaborate with Infrastructure, Networking, Cloud, Identity, and Security teams to deliver enterprise security initiatives.
• Support large-scale production environments consisting of thousands of users, applications, and distributed locations.
• Lead technical discussions, architecture reviews, and design workshops with engineering teams and business stakeholders.
• Mentor junior engineers and serve as the subject matter expert for Zero Trust technologies.
• Evaluate emerging Zero Trust technologies and recommend improvements aligned with industry best practices.

• Bachelor's Degree in Computer Science, Information Security, Engineering, or a related technical discipline (or equivalent practical experience).

• 8–12+ years of experience in Network Security, Zero Trust Architecture, Secure Access, or Enterprise Security Engineering.
• Strong hands‑on experience with Zscaler Private Access (ZPA) and Zscaler Internet Access (ZIA).
• Deep understanding of Zero Trust Architecture (ZTA), Zero Trust Network Access (ZTNA), Secure Service Edge (SSE), and Secure Access Service Edge (SASE).
• Proven experience designing and implementing enterprise‑scale Zero Trust architectures.
• Experience migrating organizations from legacy VPN solutions to cloud‑delivered Zero Trust platforms.
• Strong understanding of TCP/IP, DNS, TLS/SSL, Routing, Switching, Proxy Architectures, Firewall Policies, and Packet Analysis.
• Experience with Microsoft Entra  (Azure AD), Active Directory, Multi‑Factor Authentication (MFA), and Certificate Management.
• Experience integrating Zero Trust solutions with Microsoft Azure and AWS.
• Working knowledge of Palo Alto Firewalls, Cisco Umbrella, SD‑WAN, and enterprise firewall technologies.
• Strong troubleshooting, analytical, communication, and documentation skills.
• Experience supporting Windows, Linux, and macOS environments.
• Ability to lead architecture reviews, technical discussions, and enterprise deployments.

• Experience leading enterprise‑wide Zero Trust transformation programs.
• Experience supporting hybrid and multi‑cloud environments.
• Experience securing environments with thousands of users and applications.
• Strong documentation skills including architecture diagrams, standards, and implementation guides.
• Experience with automation using Power Shell, Python, REST APIs, or Infrastructure as Code.