Security Architect – Zero Trust, Application Access
Employment Information
Report this job
Job expired or something wrong with this job?
Job Description
Security Architect designing Zscaler Zero Trust access for internal business applications. Assessing application exposure, establishing security standards, and guiding cross-functional implementation.
Responsibilities:
- Review the internal-only application portfolio and assess each app’s risk, data sensitivity, and access requirements
- Recommend whether each application can be exposed publicly or should stay limited to managed, company-issued devices
- Design and implement Zero Trust access patterns using Zscaler (ZPA/ZIA), replacing the need for a traditional VPN
- Create, document, and roll out security standards and reference patterns for application access, authentication, and authorization
- Update existing application security standards to reflect the new access model
- Partner with application owners, infrastructure, networking, and IAM teams to gain approval for the access model and implement it
- Present findings, risks, and recommendations to IT and security leadership
Requirements:
- 8+ years in information security, with significant time in security architecture or application security leadership
- Hands-on experience designing and implementing Zero Trust architecture
- Hands-on Zscaler experience (ZPA and/or ZIA) strongly preferred
- Strong application security background, including threat modeling, secure design reviews, and authentication/SSO (SAML, OAuth, OIDC)
- Experience deciding how applications should be exposed (public, private, or device-restricted) and securing each scenario
- Familiarity with device posture checks, conditional access, and IAM platforms (Okta, Azure AD/Entra ID, or similar)
- Proven ability to write clear security standards and patterns that engineering teams actually adopt
- Strong communication skills, with comfort presenting to leadership and working across teams
- CISSP, CCSP, Zscaler certifications (ZCCA/ZCCP), or similar preferred
- Experience with WAF, reverse proxy, or API gateway security preferred
- Background in enterprise or automotive/financial services environments preferred
Benefits:
- 3-month contract with possible long-term extension onto other projects
- Remote work option
Similar Jobs
Staff Engineer, Security
Staff Security Engineer strengthening NextGen Healthcare’s cloud security posture. Automating threat detection, vulnerability mitigation, and AI-enabled security operations across cloud systems.
Security Engineer
Security Engineer protecting Allium’s canonical onchain finance data infrastructure, cloud systems, and AI agents. Building detection, response, access, and compliance controls.
Manager, Cloud Security Engineering
Cloud security engineering manager leading AWS, Azure, and GCP security teams for Workstreet’s compliance-focused client engagements. Building hardened infrastructure, automation, and audit-ready controls.
Security Engineer
Security Engineer owning vulnerability management, SIEM, and incident investigations. Securing cloud-native AWS environments for Arionkoder’s AI consulting clients.
IT Systems and Security Specialist I
IT systems and security specialist supporting Aspire Living & Learning’s service operations remotely. Maintaining IT systems and security while traveling periodically across the service area.
Associate, Cybersecurity – Data Privacy Incident Response
Associate attorney advising clients through cybersecurity incidents, data breaches, and breach notification requirements. Supporting Constangy's national Cybersecurity & Data Privacy practice.
Associate, Cybersecurity – Data Privacy Litigation
Associate attorney defending privacy, cybersecurity, and complex commercial litigation for Constangy, Brooks, Smith & Prophete, LLP. Conducting research, drafting litigation documents, and supporting cases through trial preparation.
Associate Security Researcher
Associate Security Researcher supporting Cobalt’s penetration-testing research through systems administration, threat simulation, vulnerability triage, and technical report quality control.
Cyber Security Engineer
Cyber Security Engineer leading incident response, threat hunting, and forensics for NVIDIA’s corporate, cloud, and product environments. Building automated defenses against advanced threats.
Senior Security Research Architect, Confidential Computing
Senior Security Research Architect designing Trusted Execution Environment architectures for NVIDIA NICs and DPUs. Driving confidential-computing security across hardware, software, research, and product teams.
IT and Security Manager
IT and Security Manager securing Microsoft 365, Azure, vendors, and cybersecurity operations for Furnished Quarters’ furnished apartment business. Managing infrastructure, incident response, access, compliance, and technology partnerships.
Senior Security Engineer
Senior Security Engineer protecting Cisco’s network-device portfolio through threat modeling, code review, and reproducible security testing. Improving embedded and IoT security across hardware, firmware, and device lifecycles.
Regional Sales Manager – Security
Regional Sales Manager growing security-channel sales for Nice North America, a smart home and building automation company. Managing customers, training partners, exceeding quotas, and providing competitive intelligence across the assigned territory.
Senior Director, Product Security and Privacy Counsel
Product counsel guiding security, privacy, open-source licensing, and regulatory risk for Neo4j’s graph intelligence platform. Partnering with product, engineering, security, and go-to-market teams.
Senior Security Engineer, Product
Senior Security Engineer owning product and protocol security for Jito’s Solana market infrastructure. Building security tooling, monitoring, audits, and protections for crypto products.
Principal Security Engineer
Principal Security Engineer assessing CSP architectures and authorization packages for FedRAMP compliance. Supporting Valiant Solutions’ federal cybersecurity and IT services for government customers.
Cybersecurity Engineer, Clearance Required
Cybersecurity Engineer securing Army cloud infrastructure and maintaining RMF authorization artifacts for LMI, a federal digital solutions provider. Integrating DoD controls, vulnerability management, and DevSecOps workflows.
Técnico Seguridad Perimetral
Administrador Oracle gestionando bases de datos corporativas para Logicalis Spain, empresa de centros de datos y soluciones tecnológicas. Instalación, migración, mantenimiento y soporte de entornos Oracle empresariales.
Técnico/a de Comunicaciones – Redes, Seguridad Perimetral, SD-WAN
Técnico de comunicaciones gestionando redes corporativas, seguridad perimetral y SD-WAN para The Whiteam Consulting. Integrando infraestructuras on-premise y cloud en proyectos tecnológicos.
Security Engineer II
Security Engineer securing information systems, data, and networks for a global organization. Conducting risk assessments, audits, incident investigations, and cybersecurity tool administration.