Senior Cybersecurity Architect, Zero-Trust

About the role

We are seeking a Senior Cybersecurity Architect, Zero Trust to help design and implement an enterprise-wide Zero Trust security strategy across identity, endpoints, applications, networks, data, and cloud environments. This is a senior technical position that will work closely with infrastructure, cloud, workplace technology, application, compliance, and cybersecurity teams to strengthen security architecture while supporting a modern enterprise environment.

Responsibilities

• Develop and maintain the organization's Zero Trust architecture and roadmap.
• Design security architectures based on NIST Zero Trust Architecture (SP 800-207), CISA guidance, and industry best practices.
• Lead Zero Trust initiatives across cloud, on-premises, and hybrid environments.
• Design and implement controls across identity, endpoint, network, application, cloud, and data security.
• Establish security architecture standards, reference designs, policies, and technical requirements.
• Strengthen least-privilege access, continuous verification, segmentation, and identity-based security controls.
• Partner with infrastructure, cloud, endpoint, and application teams to integrate security into existing and new technologies.
• Evaluate security technologies and identify opportunities to reduce attack surface and improve visibility.
• Provide technical guidance on security architecture and support teams through implementation.
• Ensure security solutions align with enterprise governance, compliance, and risk requirements.

Requirements

• Strong experience designing and implementing enterprise Zero Trust architectures.
• Hands-on experience with Zscaler Internet Access (ZIA) and Zscaler Private Access (ZPA).
• Deep knowledge of identity and access management, endpoint security, network security, cloud security, and data protection.
• Strong understanding of least privilege, continuous authentication/authorization, segmentation, and modern access controls.
• Experience securing hybrid and multi-cloud enterprise environments.
• Knowledge of established Zero Trust frameworks, particularly NIST SP 800-207 and the CISA Zero Trust Maturity Model.
• Ability to translate security architecture into practical technical controls and implementation plans.
• Experience partnering across security, infrastructure, cloud, workplace technology, and application engineering teams.
• Strong communication skills with the ability to work with both technical teams and senior stakeholders.