Cybersecurity Consultant; Zero Trust Architect

The Zero Trust Architect will serve as the technical authority for the customer's enterprise Zero Trust, IAM, and identity-security environment. The role is responsible for designing, implementing, and continuously improving Zero Trust architectures across identity, devices, applications, networks, cloud, data, and security operations. The Architect will work closely with IAM, SOC, AD, infrastructure, network, application, endpoint, cloud, and security teams to implement secure, scalable, and resilient Zero Trust solutions aligned with business and cybersecurity requirements.

• Design and maintain Zero Trust architecture, security standards, reference architectures, and adoption roadmaps.
• Assess security gaps across identity, devices, applications, network, cloud, data, and workloads.
• Implement least privilege, continuous verification, identity-first security, device trust, and risk-based access controls.
• Design and support IAM, SSO, MFA, ITDR, ZTNA, micro-segmentation, and identity-based access controls.
• Support application integrations using SAML 2.0, OAuth 2.0, and OIDC.
• Configure and troubleshoot enterprise security platforms including Ping Identity, Radiant One, Semperis DSP, Silverfort, and Zimperium MTD.
• Integrate identity, endpoint, network, application, cloud, and security telemetry to support Zero Trust policy enforcement.
• Monitor and investigate identity threats, suspicious authentication, privileged access, AD security events, and indicators of compromise.
• Support integration with SIEM, SOAR, EDR/XDR, UEBA, MDM/UEM, and NAC platforms.
• Perform security architecture reviews, Zero Trust maturity assessments, risk assessments, and control-gap analysis.
• Provide L2/L3 troubleshooting, root-cause analysis, incident investigation, remediation, and vendor escalation.
• Develop HLD/LLD, architecture diagrams, technical documentation, security recommendations, and implementation roadmaps.
• Provide technical guidance and knowledge transfer to customer teams and support continuous security improvement.

• Bachelor's degree in Cybersecurity, Information Security, Computer Science, IT, or a related field.
• 5+ years of experience in Zero Trust, IAM, cybersecurity, identity security, or infrastructure security.
• Strong knowledge of Zero Trust Architecture, IAM, authentication, authorization, MFA, and ITDR.
• Good working knowledge of SAML 2.0, OAuth 2.0, OIDC, LDAP, and Kerberos.
• Strong knowledge of Active Directory, Microsoft Entra , and hybrid identity architectures.
• Understanding of ZTNA, micro-segmentation, NAC, device trust, conditional access, and risk-based authentication.
• Hands-on experience with at least 2–3 of:
  Ping Identity, Radiant One, Semperis DSP, Silverfort, Zimperium MTD, ZTNA/SASE/SSE, SIEM, or EDR/XDR platforms.
• Strong troubleshooting, log analysis, security-event investigation, and root-cause analysis skills.
• Experience working with enterprise production environments and complex security architectures.
• Strong customer-facing communication, stakeholder management, technical documentation, and knowledge-transfer skills.
• Knowledge of NIST SP 800-207 and Zero Trust maturity concepts is preferred.
• Relevant certifications such as CISSP, CISM, GIAC, Microsoft, Zero Trust, IAM, or vendor-specific security certifications are preferred.

• Health insurance with one of the leading global providers for medical insurance.
• Career progression and growth through challenging projects and work.
• Employee engagement and wellness campaigns activities throughout the year.
• Annual Flight tickets to home country.
• Excellent learning and development opportunities.
• Flexible/Hybrid working environment.
• Inclusive and diverse working environment.
• Open door policy

Help AG, an e& company, is…