Cyber - Data Protection Zscaler Architect - Senior - Consulting

Location: Anywhere in Country

Opportunity

In a rapidly changing technology, data, privacy, and cybersecurity landscape, clients across industries look to us for trusted guidance on designing secure, resilient, and well‑governed zero‑trust environments. As a Senior within the Data Protection and Privacy team, you will serve as a developing Zscaler Architect with experience across Secure Access Service Edge, zero‑trust network access, secure internet access, digital experience, and data protection. Zscaler experience is required, and the role is intended for a senior consulting professional who can lead defined solution areas while supporting broader architecture across identity, endpoint, network, cloud, security operations, data governance, and relevant third‑party technologies. You will help clients translate business, security, privacy, legal, regulatory, and technology requirements into practical zero‑trust designs, roadmaps, governance approaches, and implementation plans.

Key Responsibilities

• Lead defined Zscaler security and data protection workstreams, including discovery, requirements gathering, design, configuration guidance, testing, deployment planning, and operational transition.
• Design and support solutions across the Zscaler Zero Trust Exchange, emphasizing Zscaler Internet Access, Zscaler Private Access, Zscaler Digital Experience, Zscaler Client Connector, and related data protection capabilities.
• Develop secure internet and SaaS access designs covering secure web gateway, cloud access security broker, cloud firewall, sandboxing, SSL inspection, browser isolation, threat protection, and policy enforcement patterns.
• Develop zero‑trust private application access designs covering application segmentation, access policies, App Connector placement, third‑party access, privileged remote access, and migration from legacy VPN approaches.
• Incorporate data protection requirements into Zscaler designs, including cloud DLP, SaaS security, inline inspection, policy configuration, incident workflows, and integration with enterprise data protection controls.
• Support zero‑trust, secure access, data protection, cloud, branch, workload, identity, endpoint, and digital experience assessments, roadmaps, and architecture activities.
• Facilitate client workshops and stakeholder interviews across security, privacy, legal, compliance, network, infrastructure, cloud, identity, endpoint, application, data governance, and security operations teams.
• Translate requirements into architecture diagrams, traffic‑flow designs, policy models, integration requirements, user stories, migration plans, test scenarios, operational procedures, and measurable outcomes.
• Create clear reference patterns, configuration standards, design decisions, executive presentations, and technical implementation guidance.
• Support integrations with identity providers, endpoint and device management platforms, SIEM and SOAR technologies, IT service management tools, network infrastructure, cloud platforms, data security tools, and other third‑party controls.
• Track workstream scope, activities, risks, issues, dependencies, decisions, and status, escalating material concerns to engagement leadership when appropriate.
• Provide technical direction to junior resources, review work products for quality, and contribute to an inclusive and collaborative delivery environment.
• Support proposals, statements of work, estimates, demonstrations, and client presentations for Zscaler and zero‑trust opportunities.
• Develop reusable design artifacts and delivery accelerators while maintaining awareness of Zscaler platform developments and emerging zero‑trust, cloud, data, and AI security risks.

Skills and Attributes

• Strong understanding of zero‑trust, secure access, network security, cloud security, and data protection concepts.
• Practical experience designing or implementing Zscaler capabilities in an enterprise environment.
• Ability to understand trust boundaries, traffic flows, dependencies, integration patterns, policy requirements, and control responsibilities.
• Ability to connect Zscaler platform capabilities to business, legal, privacy, regulatory, security, and operational outcomes.
• Ability to lead discovery sessions, workshops, design discussions, demonstrations, and working sessions with technical and non‑technical stakeholders.
• Ability to create high‑quality client deliverables, reports, roadmaps, presentations, traffic‑flow diagrams, architecture designs, and implementation guidance.
• Strong analytical and problem‑solving skills, including evaluating options, documenting trade‑offs, and making well‑supported recommendations.
• Ability to recognize and escalate risks, issues, dependencies, and opportunities to appropriate client and engagement leadership.
• Ability to work collaboratively in culturally diverse, cross‑functional, and geographically dispersed teams.
• Commitment to service quality, project management disciplines, documentation standards, and continuous learning.

Qualifications

• Bachelor’s degree in Computer Science, Computer Engineering, Cybersecurity, Information Systems, Network Engineering, Data Science, Privacy, or a related field, or equivalent relevant experience.
• Approximately 3–6 years of relevant experience in cybersecurity, network security, zero‑trust, data protection, identity, endpoint, cloud security, privacy, compliance, or related technology consulting.
• Hands‑on implementation, engineering, or architecture experience with Zscaler, including Zscaler Internet Access or Zscaler Private Access.
• Working knowledge of additional Zscaler capabilities such as Zscaler Digital Experience, Zscaler Client Connector, data protection, browser security, cloud and workload security, or branch and campus use cases.
• Experience supporting requirements, design, integration, configuration, testing, migration, deployment, or operational transition activities for enterprise Zscaler solutions.
• Knowledge of secure web gateway, zero‑trust network access, cloud access security broker, cloud firewall, SSL inspection, threat protection, application segmentation, or data loss prevention use cases.
• Effective communication through client conversations, workshops, interviews, written deliverables, presentations, and technical documentation.
• Experience supporting projects in large or complex enterprise environments involving multiple security, network, cloud, identity, endpoint, privacy, and business stakeholders.
• Understanding of zero‑trust, security, or privacy frameworks and regulations such as NIST, ISO 27001, CIS Controls, GDPR, CCPA/CPRA, HIPAA, or other applicable requirements.
• Ability to travel as required by client and engagement needs.
• Current or planned Zscaler certifications aligned to administration, engineering, architecture, or implementation responsibilities, plus relevant industry certifications in security, networking, cloud, or zero‑trust.
• Experience integrating Zscaler with identity providers, endpoint management, SIEM and SOAR, IT service management, cloud platforms, security operations, network services, or third‑party data security technologies.
• Experience producing architecture deliverables such as current‑ and target‑state diagrams, traffic‑flow diagrams, reference designs, control mappings, design decision records, migration plans, and transition architectures.
• Strong PowerPoint and architecture diagramming skills, with the ability to communicate complex concepts to executive, business, and technical audiences.
• Proficiency with consulting engagement methods, work planning, estimation, status reporting, risk management, and quality review.
• Experience mentoring junior resources or coordinating work across technical and functional teams.

What We Look For

We seek collaborative, curious, and accountable professionals who are passionate about zero‑trust, secure access, and data protection. Ideal candidates have meaningful hands‑on Zscaler experience, understand how network, identity, endpoint, cloud, application, security operations, digital experience, and data controls work together, and can lead defined solution areas while partnering with managers and senior architects on complex or enterprise‑wide decisions. Success requires strong client presence, technical learning agility, attention to quality, sound judgment, and a commitment to helping clients design secure, scalable, and operationally sustainable zero‑trust environments.

Compensation

Salary ranges:

• New York City, Boston, Washington DC Metro Areas, Washington State, and Southern California offices – $125,800 to $209,700
• Bay Area California offices – $131,100 to $218,500
• All other U.S. offices, including Sacramento – $104,800 to $192,200

Individual salaries are determined by factors such as education, experience, knowledge, skills, and geography.

Benefits

• Medical and dental coverage
• Pension and 401(k) plans
• Wide range of paid time off options