Cyber - Data Protection Zscaler Architect - Manager - Consulting

We need to output HTML fragment with sections: About the role? The posting includes location line, then intro paragraphs, then "The opportunity", then "Your Key Responsibilities", then "Skills And Attributes For Success", then "To qualify for the role, you must have:", then "Ideally, you’ll also have", then "What We Look For", then "What We Offer You At EY", then salary range and benefits. We need to use

for section headings: e.g., About the role, Responsibilities, Requirements, Qualifications, Skills, Benefits, Pay, Schedule. We must not repeat job title as heading. No Job ID. Remove boilerplate: cookie/navigation/legal/EEO/equal-opportunity/scam-warning, duplicated lines, application instructions. Also remove "Are you ready to shape your future with confidence? Apply today..." etc. Also remove "Learn more at ey.com/us/careers." and "To make the most of your application experience..." etc. We need to preserve substantive info. We need sections only when posting has real specific content. Let's identify content: - About the role: The intro paragraphs after location: "At EY, we’re all in to shape your future with confidence..." That's about the role/company. Could be "About the role". We'll put that as

About the role

with

paragraphs. - Responsibilities: "Your Key Responsibilities As a Manager on the Data Protection and Privacy team, your key responsibilities would include:" then bullet list. So we need

Responsibilities

with

• items. - Requirements / Qualifications: There's "To qualify for the role, you must have:" list of qualifications. Also "Ideally, you’ll also have:" list of preferred qualifications. Could combine into Requirements (must have) and maybe Qualifications (preferred). But we can have a single

  Requirements

  containing both required and preferred? The instruction: prefer few substantive sections over many thin ones. Could have Requirements covering both required and preferred. Or separate "Qualifications" for preferred. Let's see: They have "To qualify for the role, you must have:" (mandatory) and "Ideally, you’ll also have:" (preferred). We could make two sections: Requirements (mandatory) and Qualifications (preferred). Both are substantive. - Skills: There's "Skills And Attributes For Success" list. That's skills. So

  Skills

  . - Benefits: There's "What We Offer You At EY" includes professional growth, personal fulfillment, inclusive culture, plus benefits: medical and dental coverage, pension and 401(k) plans, wide range of paid time off options. Also maybe "Learn more at ey.com/us/careers." but that's boilerplate? It's a link but we can keep as part of benefits? It's not boilerplate; it's a link to careers. Might be okay to keep as part of benefits. However we should remove "Learn more at ey.com/us/careers."? It's not explicitly listed as boilerplate but could be considered navigation? It's a link to careers page; might be considered generic. Safer to drop it? The instruction: remove cookie/navigation/legal/EEO/equal-opportunity/scam-warning boilerplate, duplicated lines, and application instructions. That link is not exactly those categories; it's a career link. Might be okay to keep. But we can keep the descriptive part: "At EY, we harness our collective strength to empower you to shape your future with confidence through professional growth, personal fulfillment and an inclusive culture." That's substantive. Then benefits list. - Pay: Salary range details given. So

  Pay

  with

  containing the salary ranges. - Schedule: Not mentioned. No schedule info. So we should not create Schedule section. We must not create sections with filler like "commensurate with experience". Not present. Now we need to output only HTML fragment, no /, no markdown fences. Let's craft. Structure:

  About the role

  At EY, we’re all in to shape your future with confidence. We’ll help you succeed in a globally connected powerhouse of diverse teams and take your career wherever you want it to go. Join EY and help to build a better working world.

  The opportunity In a rapidly changing technology, data, privacy, and cybersecurity landscape, clients across industries look to us for trusted guidance on designing secure, resilient, and well-governed zero trust environments. As a Manager within the Data Protection and Privacy team, you will serve as a Zscaler Architect and engagement leader with broad expertise across secure access service edge, zero trust network access, secure internet access, cloud and branch security, digital experience, and data protection. Zscaler experience is required, and the role is intended for an overall architect who can connect the Zscaler platform with identity, endpoint, network, cloud, security operations, data governance, and relevant third-party technologies. The Manager is expected to own end-to-end solution architecture for defined engagements, establish cross-platform design direction, manage multidisciplinary delivery teams, oversee quality and financial performance, develop trusted client relationships, and contribute to business development. You will help clients translate business, security, privacy, legal, regulatory, and technology requirements into integrated zero trust strategies, target-state architectures, roadmaps, governance models, and implementation programs.

  But note: The "The opportunity" paragraph is part of about the role; we could keep as separate paragraph. Now Responsibilities:

  Responsibilities

  • Lead Zscaler security and data protection engagements from discovery and solution shaping through architecture, implementation oversight, testing, deployment, operational transition, and benefits realization.
  • Own end-to-end solution architecture across the Zscaler Zero Trust Exchange, including Zscaler Internet Access, Zscaler Private Access, Zscaler Digital Experience, Zscaler Client Connector, cloud security, branch security, workload security, and related data protection capabilities.
  • Design secure internet and SaaS access architectures, including secure web gateway, cloud access security broker, cloud firewall, sandboxing, SSL inspection, browser isolation, advanced threat protection, and policy enforcement patterns.
  • Design zero trust private application access architectures, including application segmentation, access policies, App Connector placement, private service edge considerations, third-party access, privileged remote access, and migration from legacy VPN approaches.
  • Incorporate data protection capabilities into broader zero trust architectures, including data discovery, classification, cloud DLP, SaaS security, inline inspection, policy design, incident workflows, and control integration.
  • Develop integrated zero trust, secure access, data protection, cloud, branch, workload, identity, endpoint, and digital experience strategies aligned with business objectives and regulatory obligations.
  • Lead enterprise security assessments, architecture reviews, maturity assessments, control gap analyses, roadmaps, target operating models, governance frameworks, and transformation programs.
  • Facilitate executive and working-level workshops across security, privacy, legal, compliance, network, infrastructure, cloud, identity, endpoint, application, data governance, security operations, audit, and business stakeholders.
  • Translate requirements into target-state architectures, traffic-flow designs, policy models, integration requirements, migration waves, implementation plans, testing approaches, operational procedures, and measurable outcomes.
  • Establish architecture principles, reference patterns, configuration standards, decision records, integration requirements, and quality criteria for Zscaler-based enterprise solutions.
  • Design and oversee integrations with identity providers, endpoint and device management platforms, SIEM and SOAR technologies, IT service management tools, network infrastructure, cloud platforms, data security tools, and other third-party controls.
  • Manage engagement scope, workplans, staffing, budgets, risks, dependencies, quality reviews, executive reporting, and coordination with client and firm leadership.
  • Provide architecture direction and coaching to Senior and junior resources, review technical deliverables, resolve cross-platform design issues, and escalate material risks when appropriate.
  • Build trusted client relationships, identify opportunities to extend value, support proposals and statements of work, contribute to solution pricing and estimation, and participate in account development.
  • Develop reusable architecture methods, reference designs, accelerators, points of view, and thought leadership while maintaining awareness of Zscaler platform developments and emerging zero trust, cloud, data, and AI security risks.
  Now Requirements (mandatory):

  Requirements

  • A bachelor’s degree in Computer Science, Computer Engineering, Cybersecurity, Information Systems, Network Engineering, Data Science, Privacy, or a related field, or equivalent relevant experience.
  • Approximately 6 or more years of relevant experience in cybersecurity, network security, zero trust, data protection, identity, endpoint, cloud security, privacy, compliance, or related technology consulting, including experience leading teams or workstreams.
  • Demonstrated experience architecting integrated Zscaler solutions across secure internet access, private application access, cloud, branch, workload, digital experience, and data protection capabilities.
  • Required hands-on architecture or delivery experience with Zscaler, including meaningful depth in Zscaler Internet Access and Zscaler Private Access and working knowledge of adjacent Zscaler capabilities.
  • Experience developing policy and architecture for secure web gateway, zero trust network access, cloud access security broker, cloud firewall, SSL inspection, threat protection, application segmentation, and data loss prevention use cases.
  • Experience leading requirements, architecture, design, integration, configuration oversight, testing, migration, deployment, and operating model activities for enterprise Zscaler solutions.
  • Demonstrated leadership experience managing and mentoring consulting or technical teams and coordinating work across client and third-party stakeholders.
  • Experience managing engagement scope, plans, risks, issues, quality, resources, budgets, and executive communications in a professional services or similarly client-driven environment.
  • Experience supporting business development activities, including solution shaping, estimation, proposal development, statements of work, and client presentations.
  • Understanding of zero trust, security, and privacy frameworks or regulations such as NIST, ISO 27001, CIS Controls, GDPR, CCPA/CPRA, HIPAA, or other applicable requirements.
  • Ability to travel as required by client and engagement needs.
  Now Qualifications (preferred):

  Qualifications

  • Current Zscaler certifications aligned to architecture and implementation responsibilities, together with relevant industry certifications in security, networking, cloud, or zero trust.
  • Experience with Zscaler Digital Experience, Zscaler Client Connector, cloud and workload security, branch and campus use cases, browser security, privileged remote access, and data protection capabilities.
  • Experience developing enterprise zero trust, secure access service edge, data protection, cloud security, identity, endpoint, branch, or network transformation strategies and operating models.
  • Experience integrating Zscaler with identity providers, endpoint management, SIEM and SOAR, IT service management, cloud platforms, security operations, network services, and third-party data security technologies.
  • Experience with architecture methods and deliverables such as capability models, current- and target-state diagrams, traffic-flow diagrams, reference architectures, control mappings, design decision records, migration roadmaps, and transition architectures.
  • Strong PowerPoint and architecture diagramming skills, including the ability to communicate complex cross-platform concepts to executive, business, and technical audiences.
  • Experience developing team capabilities, reusable assets, market offerings, points of view, or thought leadership.
  • Experience contributing to account planning, pipeline development, pursuit leadership, or expansion of client relationships.
  Now Skills:

  Skills

  • Strong client leadership and executive communication skills, with the ability to explain complex zero trust, secure access, network, cloud, data protection, and security architecture topics in business and technical terms.