> Markdown version of [/jobs/ext/1428263-internet-security-architect](https://www.wearedevelopers.com/jobs/ext/1428263-internet-security-architect). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md). --- # Internet Security Architect - **Company:** Vision Square - **Location:** United States - **Experience:** Experienced - **Contract:** Permanent contract - **Skills:** Microsoft Access, Active Directory, Amazon Web Services, Microsoft Azure, Border Gateway Protocol, Cloud Computing, Cloud Computing Security, Cyber Security, Information Leak Prevention, Domain Name System Security Extensions, Multi-Factor Authentication, Internet Security, Virtual Private Networks (VPN), Python (Programming Language), Network Security, Microsoft Office, Open Shortest Path First (OSPF), Ping (Networking Utility), Windows PowerShell, Azure Active Directory, Ansible, Zero Trust Network Access, Web Application Security, Security Information and Event Management, Systems Integration, Wide Area Networks, Transport Layer Security, Google Cloud, Okta, QRadar, Firewalls (Computer Science), Information Technology, Microsoft Sentinel, Routing & Switching, Terraform, Open Network Automation Platform, Splunk, Cisco, Servicenow, Vmware - **Published:** July 24, 2026 - **Apply:** https://www.indeed.com/viewjob?jk=058b1f6570e9da23 ## About the Role * Bachelor's degree in Computer Science, Information Technology, or a related field. * 8+ years of experience in Network Security or Cybersecurity. * 4+ years of hands-on experience implementing and supporting Zscaler solutions. * Strong expertise with: + Zscaler Internet Access (ZIA), + Routing & Switching + VPN + BGP + OSPF * Experience with cloud platforms: + Microsoft Azure + AWS + Google Cloud Platform (GCP) * Experience integrating Zscaler with Azure AD, Okta, Active Directory, and MFA solutions. * Familiarity with automation using Python, PowerShell, Terraform, or Ansible is a plus. * Strong analytical, troubleshooting, and communication skills. Preferred Certifications * Zscaler Certified Administrator (ZCCA) * Zscaler Certified Architect * CISSP * CCSP * CISM * CCNP Security or CCIE Security Preferred Skills * SD-WAN (Cisco Viptela, Versa, VMware SD-WAN) * CASB * DNS Security * Cloud Firewall * DLP * SIEM (Splunk, Microsoft Sentinel, QRadar) * ServiceNow * Network Automation * Zero Trust Security Architecture ## Description We are seeking an experienced Internet Security Architect with expertise in Zscaler Internet Access (ZIA), Zscaler Private Access (ZPA), Internet Breakout (IBC), and Office Breakout (OBC) to architect, implement, and optimize enterprise internet security solutions. The ideal candidate will have strong experience in Zero Trust architecture, SASE, cloud security, secure web gateways, and enterprise networking., * Design and implement enterprise internet security architecture using Zscaler IBC/OBC solutions. * Architect and deploy Zscaler Internet Access (ZIA) and Zscaler Private Access (ZPA) environments. * Develop secure Internet Breakout and Office Breakout strategies for branch offices and enterprise campuses. * Design and implement Zero Trust Network Access (ZTNA) solutions. * Configure and manage security policies including SSL inspection, URL filtering, DNS security, cloud firewall, and Data Loss Prevention (DLP). * Integrate Zscaler with Identity Providers (Azure AD, Okta, Ping Identity, Active Directory). * Collaborate with Network, Cloud, and Security teams to support SASE and SD-WAN initiatives. * Troubleshoot complex internet access, proxy, and cloud connectivity issues. * Perform architecture reviews, security assessments, and infrastructure optimization. * Create technical documentation, implementation guides, and operational standards. ## Related Videos - [How Cisco embraced a DevOps culture within its network engineering team](https://www.wearedevelopers.com/videos/99-how-cisco-embraced-a-devops-culture-within-its-network-engineering-team) - [You can’t hack what you can’t see](https://www.wearedevelopers.com/videos/41-you-can-t-hack-what-you-can-t-see) - [WebAssembly: The Next Frontier of Cloud Computing](https://www.wearedevelopers.com/videos/972-webassembly-the-next-frontier-of-cloud-computing) - [Generating code with Angular schematics](https://www.wearedevelopers.com/videos/129-generating-code-with-angular-schematics) - [Computer Vision from the Edge to the Cloud done easy](https://www.wearedevelopers.com/videos/263-computer-vision-from-the-edge-to-the-cloud-done-easy) - [Security Pitfalls for Software Engineers](https://www.wearedevelopers.com/videos/726-security-pitfalls-for-software-engineers) ## Related Articles - [Events like RSAC Get You CISOs. Developers Decide What Actually Gets Deployed.](https://www.wearedevelopers.com/magazine/693-events-like-rsac-get-you-cisos-developers-decide-what-actually-gets-deployed) - [What Are The Top Skills Required For Azure Developers?](https://www.wearedevelopers.com/magazine/77-what-are-the-top-skills-required-for-azure-developers) - [9 Ways to Make Money Hacking](https://www.wearedevelopers.com/magazine/333-9-ways-to-make-money-hacking) - [The Overflow: Security and Privacy](https://www.wearedevelopers.com/magazine/715-the-overflow-security-and-privacy) - [Understanding and Mitigating Common Web Vulnerabilities](https://www.wearedevelopers.com/magazine/565-understanding-and-mitigating-common-web-vulnerabilities) - [Dev Digest 134 - Where pixels sing?](https://www.wearedevelopers.com/magazine/477-dev-digest-134-where-pixels-sing)