Internet Security Architect

We are seeking an experienced Internet Security Architect with expertise in Zscaler Internet Access (ZIA), Zscaler Private Access (ZPA), Internet Breakout (IBC), and Office Breakout (OBC) to architect, implement, and optimize enterprise internet security solutions. The ideal candidate will have strong experience in Zero Trust architecture, SASE, cloud security, secure web gateways, and enterprise networking., * Design and implement enterprise internet security architecture using Zscaler IBC/OBC solutions.

• Architect and deploy Zscaler Internet Access (ZIA) and Zscaler Private Access (ZPA) environments.
• Develop secure Internet Breakout and Office Breakout strategies for branch offices and enterprise campuses.
• Design and implement Zero Trust Network Access (ZTNA) solutions.
• Configure and manage security policies including SSL inspection, URL filtering, DNS security, cloud firewall, and Data Loss Prevention (DLP).
• Integrate Zscaler with Identity Providers (Azure AD, Okta, Ping Identity, Active Directory).
• Collaborate with Network, Cloud, and Security teams to support SASE and SD-WAN initiatives.
• Troubleshoot complex internet access, proxy, and cloud connectivity issues.
• Perform architecture reviews, security assessments, and infrastructure optimization.
• Create technical documentation, implementation guides, and operational standards.

• Bachelor’s degree in Computer Science, Information Technology, or a related field.
• 8+ years of experience in Network Security or Cybersecurity.
• 4+ years of hands-on experience implementing and supporting Zscaler solutions.
• Strong expertise with:
• Zscaler Internet Access (ZIA), + Routing & Switching
• VPN
• BGP
• OSPF
• Experience with cloud platforms:
• Microsoft Azure
• AWS
• Google Cloud Platform (GCP)
• Experience integrating Zscaler with Azure AD, Okta, Active Directory, and MFA solutions.
• Familiarity with automation using Python, PowerShell, Terraform, or Ansible is a plus.
• Strong analytical, troubleshooting, and communication skills.

Preferred Certifications

• Zscaler Certified Administrator (ZCCA)
• Zscaler Certified Architect
• CISSP
• CCSP
• CISM
• CCNP Security or CCIE Security

Preferred Skills

• SD-WAN (Cisco Viptela, Versa, VMware SD-WAN)
• CASB
• DNS Security
• Cloud Firewall
• DLP
• SIEM (Splunk, Microsoft Sentinel, QRadar)
• ServiceNow
• Network Automation
• Zero Trust Security Architecture

• Hands-on experience with modern SASE and Zscaler technologies.
• Opportunity to collaborate with leading Network, Cloud, and Security teams.
• Long-term contract with cutting-edge enterprise infrastructure projects.