Network Architect

Zero Trust / SASE Network Architect

Experience:

12+ years |

Location:

India/ Remote

Key Responsibilities:

Establish a Zero Trust maturity baseline using CISA Zero Trust Maturity Model / NIST SP 800-207.
Assess current network and security architecture, including Prisma Access, firewalls, remote access, Azure and private cloud connectivity.
Inventory and analyze all user, device, contractor, administrative, vendor, and third-party access paths.
Assess Jack Henry private cloud–Azure connectivity, including capacity, performance, redundancy, failover, contracts, and costs.
Identify CASB, ZTNA and SASE capability gaps and recommend remediation options.
Evaluate SASE/SSE solutions including Palo Alto Prisma SASE, Microsoft Global Secure Access, and other leading alternatives using defined evaluation criteria.
Validate Microsoft Entra Internet Access / Private Access licensing and cost implications.
Develop a prioritized risk and gap register, target-state architecture, and phased implementation roadmap.
Build cost models covering licensing, implementation, professional services, and internal resources.
Prepare an executive-level business case and go/no-go recommendation.

Key Deliverables:

Zero Trust maturity assessment and current-state architecture.
Network/access path inventory and gap analysis.
Private cloud–Azure connectivity assessment.
CASB, ZTNA and SASE gap assessment.
Weighted SASE vendor evaluation matrix.
Prioritized risk/gap register.
Multi-year implementation roadmap with dependencies.
Cost model and business case.
Recommended target-state / reference architecture.