Cyber - Data Protection Zscaler Architect - Senior - Consulting
EY · San Antonio, TX · 1 mo ago
HybridEngineering$126k–$210k/yrFull-time
We need to output HTML fragment with sections: About the role? The posting includes intro paragraphs. We need to use for section headings like About the role, Responsibilities, Requirements, Qualifications, Skills, Benefits, Pay, Schedule. We must only include sections when posting has real specific content. We have content: "The opportunity" paragraph describing role. Could be About the role. Then "Your Key Responsibilities" list. Then "Skills And Attributes For Success" (skills). Then "To qualify for the role, you must have:" (requirements/qualifications). Then "Ideally, you’ll also have" (preferred qualifications). Then "What We Look For" maybe could be part of skills? But we can treat as additional skills/attributes. Then "What We Offer You" includes benefits and pay range. So we need Benefits, Pay sections. Also maybe Schedule not present, so omit.
We must not repeat job title as heading. No Job ID. Remove boilerplate like EEO, legal, application instructions, etc. Also remove navigation, cookie, etc. The posting includes some boilerplate at end: "Are you ready to shape your future with confidence? Apply today..." and other legal stuff. We must remove application instructions and boilerplate. So we keep only substantive content: intro paragraph(s), The opportunity, Your Key Responsibilities, Skills And Attributes For Success, To qualify..., Ideally..., What We Look For, What We Offer You (including salary range and benefits). Also maybe location line "Location: Anywhere in Country" - minor metadata, we can fold into short p or drop. Probably include as a short p.
We need to preserve all substantive information, not invent or summarize away detail. So we need to keep details like salary ranges per region, benefits description.
We must not create sections with filler like "commensurate with experience". We have actual salary ranges, so Pay section is valid.
Benefits: "In addition, our Total Rewards package includes medical and dental coverage, pension and 401(k) plans, and a wide range of paid time off options." That's benefits.
Schedule: not present, omit.
We need to use
for section headings like About the role, Responsibilities, Requirements, Qualifications, Skills, Benefits, Pay, Schedule. We must only include sections when posting has real specific content. We have content: "The opportunity" paragraph describing role. Could be About the role. Then "Your Key Responsibilities" list. Then "Skills And Attributes For Success" (skills). Then "To qualify for the role, you must have:" (requirements/qualifications). Then "Ideally, you’ll also have" (preferred qualifications). Then "What We Look For" maybe could be part of skills? But we can treat as additional skills/attributes. Then "What We Offer You" includes benefits and pay range. So we need Benefits, Pay sections. Also maybe Schedule not present, so omit.
We must not repeat job title as heading. No Job ID. Remove boilerplate like EEO, legal, application instructions, etc. Also remove navigation, cookie, etc. The posting includes some boilerplate at end: "Are you ready to shape your future with confidence? Apply today..." and other legal stuff. We must remove application instructions and boilerplate. So we keep only substantive content: intro paragraph(s), The opportunity, Your Key Responsibilities, Skills And Attributes For Success, To qualify..., Ideally..., What We Look For, What We Offer You (including salary range and benefits). Also maybe location line "Location: Anywhere in Country" - minor metadata, we can fold into short p or drop. Probably include as a short p.
We need to preserve all substantive information, not invent or summarize away detail. So we need to keep details like salary ranges per region, benefits description.
We must not create sections with filler like "commensurate with experience". We have actual salary ranges, so Pay section is valid.
Benefits: "In addition, our Total Rewards package includes medical and dental coverage, pension and 401(k) plans, and a wide range of paid time off options." That's benefits.
Schedule: not present, omit.
We need to use - for any list of duties/requirements/benefits. For responsibilities list, we have a paragraph with many responsibilities separated by periods. Could break into list items? The instruction: Use
- for any list of duties/requirements/benefits. The responsibilities are enumerated as a sentence with many items separated by commas and semicolons. We could split into list items each responsibility. But we must preserve ALL substantive information; we can convert the sentence into list items each covering a responsibility. That seems acceptable.
Similarly for Skills And Attributes For Success: list of bullet-like sentences. We can make list.
Requirements: "To qualify for the role, you must have:" then bullet list of items. We'll make list.
Ideally, you’ll also have: list.
What We Look For: maybe a paragraph; could be left as
.
What We Offer You: includes benefits and pay. We'll separate Benefits and Pay sections.
We need headings: About the role (maybe from "The opportunity" paragraph). Responsibilities (Your Key Responsibilities). Skills (Skills And Attributes For Success). Requirements (To qualify...). Preferred Qualifications (Ideally...). Maybe also "What We Look For" could be part of Skills but we could make a separate section like "Desired Attributes". But heading must be from list: About the role, Responsibilities, Requirements, Qualifications, Skills, Benefits, Pay, Schedule. Qualifications vs Requirements? The list includes Qualifications as a possible heading. We could use Requirements for mandatory qualifications, Qualifications for preferred? But we have both. Could use Requirements for mandatory, Qualifications for preferred. Or we could combine. The instruction: Use
for section headings (e.g. About the role, Responsibilities, Requirements, Qualifications, Skills, Benefits, Pay, Schedule). So we can choose any of those. We'll map:
- About the role: intro + The opportunity paragraph.
- Responsibilities: Your Key Responsibilities.
- Skills: Skills And Attributes For Success + What We Look For (maybe combine).
- Requirements: To qualify...
- Qualifications: Ideally...
- Benefits: What We Offer You benefits.
- Pay: salary ranges.
We must not create sections with filler. All have content.
Now produce HTML fragment only.
We'll need to escape any HTML special characters? Not needed.
Structure:
About the role
Location: Anywhere in Country
At EY, we’re all in to shape your future with confidence. We’ll help you succeed in a globally connected powerhouse of diverse teams and take your career wherever you want it to go. Join EY and help to build a better working world. The opportunity In a rapidly changing technology, data, privacy, and cybersecurity landscape, clients across industries look to us for trusted guidance on designing secure, resilient, and well-governed zero trust environments. As a Senior within the Data Protection and Privacy team, you will serve as a developing Zscaler Architect with experience across secure access service edge, zero trust network access, secure internet access, digital experience, and data protection. Zscaler experience is required, and the role is intended for a senior consulting professional who can lead defined solution areas while supporting broader architecture across identity, endpoint, network, cloud, security operations, data governance, and relevant third-party technologies. The Senior is expected to lead defined workstreams, facilitate client discussions, develop solution designs, guide implementation activities, and produce high-quality architecture and delivery artifacts while working under the direction of a Manager or senior architect for complex or enterprise-wide decisions. You will help clients translate business, security, privacy, legal, regulatory, and technology requirements into practical zero trust designs, roadmaps, governance approaches, and implementation plans.
But note we have duplicated "The opportunity" phrase; we can keep as part of paragraph.
Better to keep the intro paragraphs separate? Could combine.
Now Responsibilities:
Responsibilities
- Lead defined Zscaler security and data protection workstreams, including discovery, requirements gathering, design, configuration guidance, testing, deployment planning, and operational transition.
- Design and support solutions across the Zscaler Zero Trust Exchange, with particular emphasis on Zscaler Internet Access, Zscaler Private Access, Zscaler Digital Experience, Zscaler Client Connector, and related data protection capabilities.
- Develop secure internet and SaaS access designs covering secure web gateway, cloud access security broker, cloud firewall, sandboxing, SSL inspection, browser isolation, threat protection, and policy enforcement patterns.
- Develop zero trust private application access designs covering application segmentation, access policies, App Connector placement, third-party access, privileged remote access, and migration from legacy VPN approaches.
- Incorporate data protection requirements into Zscaler designs, including cloud DLP, SaaS security, inline inspection, policy configuration, incident workflows, and integration with enterprise data protection controls.
- Support zero trust, secure access, data protection, cloud, branch, workload, identity, endpoint, and digital experience assessments, roadmaps, and architecture activities.
- Facilitate client workshops and stakeholder interviews across security, privacy, legal, compliance, network, infrastructure, cloud, identity, endpoint, application, data governance, and security operations teams.
- Translate requirements into architecture diagrams, traffic-flow designs, policy models, integration requirements, user stories, migration plans, test scenarios, operational procedures, and measurable outcomes.
- Create clear reference patterns, configuration standards, design decisions, executive presentations, and technical implementation guidance.
- Support integrations with identity providers, endpoint and device management platforms, SIEM and SOAR technologies, IT service management tools, network infrastructure, cloud platforms, data security tools, and other third-party controls.
- Track workstream scope, activities, risks, issues, dependencies, decisions, and status, escalating material concerns to engagement leadership when appropriate.
- Provide technical direction to junior resources, review work products for quality, and contribute to an inclusive and collaborative delivery environment.
- Support proposals, statements of work, estimates, demonstrations, and client presentations for Zscaler and zero trust opportunities.
- Develop reusable design artifacts and delivery accelerators while maintaining awareness of Zscaler platform developments and emerging zero trust, cloud, data, and AI security risks.
Skills:
Skills
- Strong understanding of zero trust, secure access, network security, cloud security, and data protection concepts.
- Practical experience designing or implementing Zscaler capabilities in an enterprise environment.
- Ability to understand trust boundaries, traffic flows, dependencies, integration patterns, policy requirements, and control responsibilities.
- Ability to connect Zscaler platform capabilities to business, legal, privacy, regulatory, security, and operational outcomes.
- Ability to lead discovery sessions, workshops, design discussions, demonstrations, and working sessions with technical and non-technical stakeholders.
- Ability to create high-quality client deliverables, reports, roadmaps, presentations, traffic-flow diagrams, architecture designs, and implementation guidance.
- Strong analytical and problem-solving skills, including the ability to evaluate options, document tradeoffs, and make well-supported recommendations.
- Ability to recognize and escalate risks, issues, dependencies, and opportunities to appropriate client and engagement leadership.
- Ability to work collaboratively in culturally diverse, cross-functional, and geographically dispersed teams.
- Commitment to service quality, project management disciplines, documentation standards, and continuous learning.
- Collaborative, curious, and accountable professionals who are passionate about zero trust, secure access, and data protection.
- Meaningful hands-on Zscaler experience, understand how network, identity, endpoint, cloud, application, security operations, digital experience, and data controls work together, and can lead defined solution areas while partnering with Managers and senior architects on complex or enterprise-wide decisions.
- Strong client presence, technical learning agility, attention to quality, sound judgment, and a commitment to helping clients design secure, scalable, and operationally sustainable zero trust environments.
But note we duplicated some from What We Look For; we included those as skills. That's okay.
Requirements:
Requirements
- A bachelor’s degree in Computer Science, Computer Engineering, Cybersecurity, Information Systems, Network Engineering, Data Science, Privacy, or a related field, or equivalent relevant experience.
- Approximately 3-6 years of relevant experience in cybersecurity, network security, zero trust, data protection, identity, endpoint, cloud security, privacy, compliance, or related technology consulting.
- Required hands-on implementation, engineering, or architecture experience with Zscaler, including experience with Zscaler Internet Access or Zscaler Private Access.
- Working knowledge of additional Zscaler capabilities such as Zscaler Digital Experience, Zscaler Client Connector, data protection, browser security, cloud and workload security, or branch and campus use cases.
- Experience supporting requirements, design, integration, configuration, testing, migration, deployment, or operational transition activities for enterprise Zscaler solutions.
- Knowledge of secure web gateway, zero trust network access, cloud access security broker, cloud firewall, SSL inspection, threat protection, application segmentation, or data loss prevention use cases.
- Ability to communicate effectively through client conversations, workshops, interviews, written deliverables, presentations, and technical documentation.
- Experience supporting projects in large or complex enterprise environments involving multiple security, network, cloud, identity, endpoint, privacy, and business stakeholders.
- Understanding of zero trust, security, or privacy frameworks and regulations such as NIST, ISO 27001, CIS Controls, GDPR, CCPA/CPRA, HIPAA, or other applicable requirements.
- Ability to travel as required by client and engagement needs.
Qualifications (
- for any list of duties/requirements/benefits. The responsibilities are enumerated as a sentence with many items separated by commas and semicolons. We could split into list items each responsibility. But we must preserve ALL substantive information; we can convert the sentence into list items each covering a responsibility. That seems acceptable.
Similarly for Skills And Attributes For Success: list of bullet-like sentences. We can make list.
Requirements: "To qualify for the role, you must have:" then bullet list of items. We'll make list.
Ideally, you’ll also have: list.
What We Look For: maybe a paragraph; could be left as
. What We Offer You: includes benefits and pay. We'll separate Benefits and Pay sections. We need headings: About the role (maybe from "The opportunity" paragraph). Responsibilities (Your Key Responsibilities). Skills (Skills And Attributes For Success). Requirements (To qualify...). Preferred Qualifications (Ideally...). Maybe also "What We Look For" could be part of Skills but we could make a separate section like "Desired Attributes". But heading must be from list: About the role, Responsibilities, Requirements, Qualifications, Skills, Benefits, Pay, Schedule. Qualifications vs Requirements? The list includes Qualifications as a possible heading. We could use Requirements for mandatory qualifications, Qualifications for preferred? But we have both. Could use Requirements for mandatory, Qualifications for preferred. Or we could combine. The instruction: Use
for section headings (e.g. About the role, Responsibilities, Requirements, Qualifications, Skills, Benefits, Pay, Schedule). So we can choose any of those. We'll map: - About the role: intro + The opportunity paragraph. - Responsibilities: Your Key Responsibilities. - Skills: Skills And Attributes For Success + What We Look For (maybe combine). - Requirements: To qualify... - Qualifications: Ideally... - Benefits: What We Offer You benefits. - Pay: salary ranges. We must not create sections with filler. All have content. Now produce HTML fragment only. We'll need to escape any HTML special characters? Not needed. Structure:
About the role
Location: Anywhere in Country
At EY, we’re all in to shape your future with confidence. We’ll help you succeed in a globally connected powerhouse of diverse teams and take your career wherever you want it to go. Join EY and help to build a better working world. The opportunity In a rapidly changing technology, data, privacy, and cybersecurity landscape, clients across industries look to us for trusted guidance on designing secure, resilient, and well-governed zero trust environments. As a Senior within the Data Protection and Privacy team, you will serve as a developing Zscaler Architect with experience across secure access service edge, zero trust network access, secure internet access, digital experience, and data protection. Zscaler experience is required, and the role is intended for a senior consulting professional who can lead defined solution areas while supporting broader architecture across identity, endpoint, network, cloud, security operations, data governance, and relevant third-party technologies. The Senior is expected to lead defined workstreams, facilitate client discussions, develop solution designs, guide implementation activities, and produce high-quality architecture and delivery artifacts while working under the direction of a Manager or senior architect for complex or enterprise-wide decisions. You will help clients translate business, security, privacy, legal, regulatory, and technology requirements into practical zero trust designs, roadmaps, governance approaches, and implementation plans.
But note we have duplicated "The opportunity" phrase; we can keep as part of paragraph. Better to keep the intro paragraphs separate? Could combine. Now Responsibilities:Responsibilities
- Lead defined Zscaler security and data protection workstreams, including discovery, requirements gathering, design, configuration guidance, testing, deployment planning, and operational transition.
- Design and support solutions across the Zscaler Zero Trust Exchange, with particular emphasis on Zscaler Internet Access, Zscaler Private Access, Zscaler Digital Experience, Zscaler Client Connector, and related data protection capabilities.
- Develop secure internet and SaaS access designs covering secure web gateway, cloud access security broker, cloud firewall, sandboxing, SSL inspection, browser isolation, threat protection, and policy enforcement patterns.
- Develop zero trust private application access designs covering application segmentation, access policies, App Connector placement, third-party access, privileged remote access, and migration from legacy VPN approaches.
- Incorporate data protection requirements into Zscaler designs, including cloud DLP, SaaS security, inline inspection, policy configuration, incident workflows, and integration with enterprise data protection controls.
- Support zero trust, secure access, data protection, cloud, branch, workload, identity, endpoint, and digital experience assessments, roadmaps, and architecture activities.
- Facilitate client workshops and stakeholder interviews across security, privacy, legal, compliance, network, infrastructure, cloud, identity, endpoint, application, data governance, and security operations teams.
- Translate requirements into architecture diagrams, traffic-flow designs, policy models, integration requirements, user stories, migration plans, test scenarios, operational procedures, and measurable outcomes.
- Create clear reference patterns, configuration standards, design decisions, executive presentations, and technical implementation guidance.
- Support integrations with identity providers, endpoint and device management platforms, SIEM and SOAR technologies, IT service management tools, network infrastructure, cloud platforms, data security tools, and other third-party controls.
- Track workstream scope, activities, risks, issues, dependencies, decisions, and status, escalating material concerns to engagement leadership when appropriate.
- Provide technical direction to junior resources, review work products for quality, and contribute to an inclusive and collaborative delivery environment.
- Support proposals, statements of work, estimates, demonstrations, and client presentations for Zscaler and zero trust opportunities.
- Develop reusable design artifacts and delivery accelerators while maintaining awareness of Zscaler platform developments and emerging zero trust, cloud, data, and AI security risks.
Skills
- Strong understanding of zero trust, secure access, network security, cloud security, and data protection concepts.
- Practical experience designing or implementing Zscaler capabilities in an enterprise environment.
- Ability to understand trust boundaries, traffic flows, dependencies, integration patterns, policy requirements, and control responsibilities.
- Ability to connect Zscaler platform capabilities to business, legal, privacy, regulatory, security, and operational outcomes.
- Ability to lead discovery sessions, workshops, design discussions, demonstrations, and working sessions with technical and non-technical stakeholders.
- Ability to create high-quality client deliverables, reports, roadmaps, presentations, traffic-flow diagrams, architecture designs, and implementation guidance.
- Strong analytical and problem-solving skills, including the ability to evaluate options, document tradeoffs, and make well-supported recommendations.
- Ability to recognize and escalate risks, issues, dependencies, and opportunities to appropriate client and engagement leadership.
- Ability to work collaboratively in culturally diverse, cross-functional, and geographically dispersed teams.
- Commitment to service quality, project management disciplines, documentation standards, and continuous learning.
- Collaborative, curious, and accountable professionals who are passionate about zero trust, secure access, and data protection.
- Meaningful hands-on Zscaler experience, understand how network, identity, endpoint, cloud, application, security operations, digital experience, and data controls work together, and can lead defined solution areas while partnering with Managers and senior architects on complex or enterprise-wide decisions.
- Strong client presence, technical learning agility, attention to quality, sound judgment, and a commitment to helping clients design secure, scalable, and operationally sustainable zero trust environments.
Requirements
- A bachelor’s degree in Computer Science, Computer Engineering, Cybersecurity, Information Systems, Network Engineering, Data Science, Privacy, or a related field, or equivalent relevant experience.
- Approximately 3-6 years of relevant experience in cybersecurity, network security, zero trust, data protection, identity, endpoint, cloud security, privacy, compliance, or related technology consulting.
- Required hands-on implementation, engineering, or architecture experience with Zscaler, including experience with Zscaler Internet Access or Zscaler Private Access.
- Working knowledge of additional Zscaler capabilities such as Zscaler Digital Experience, Zscaler Client Connector, data protection, browser security, cloud and workload security, or branch and campus use cases.
- Experience supporting requirements, design, integration, configuration, testing, migration, deployment, or operational transition activities for enterprise Zscaler solutions.
- Knowledge of secure web gateway, zero trust network access, cloud access security broker, cloud firewall, SSL inspection, threat protection, application segmentation, or data loss prevention use cases.
- Ability to communicate effectively through client conversations, workshops, interviews, written deliverables, presentations, and technical documentation.
- Experience supporting projects in large or complex enterprise environments involving multiple security, network, cloud, identity, endpoint, privacy, and business stakeholders.
- Understanding of zero trust, security, or privacy frameworks and regulations such as NIST, ISO 27001, CIS Controls, GDPR, CCPA/CPRA, HIPAA, or other applicable requirements.
- Ability to travel as required by client and engagement needs.