Security Architect (Zscaler)

Allura Partners; Sydney; On-site; AUD 185,000 - 194,000; Full time

Job summary

Allura Partners is seeking an Infrastructure/Security Architect to own the Zscaler SSE/SASE architecture end-to-end in Sydney. You will run requirement workshops, translate needs into Zscaler designs, and oversee implementation.

The role includes deploying ZIA/ZPA, CASB, SSPM across SaaS, expanding DLP and device controls, and delivering LLDS to governance forums. Strong IaC and security framework knowledge are essential.

Qualifications

• Mastery of SASE frameworks, NIST CSF, CIS Controls, and Zero Trust.
• Advanced design experience with Zscaler ZIA/ZPA.
• Deep expertise in Azure Security Center, Defender for Cloud Apps, Entra ID, and CA policies.
• Proficiency in IaC using Terraform, Bicep, or ARM templates.

Responsibilities

• Run requirement gathering workshops with business units, translating operational needs into Zscaler Zero Trust Exchange architecture and policy design.
• Architect and deploy ZIA and ZPA as the core SSE/SASE framework, securing remote access and web traffic.
• Direct rollout of Zscaler CASB (inline and API-based) and managing SSPM across key SaaS platforms, including sensitive data scanning
• Expanding DLP and device control policy within Zscaler to lock down web DLP, personal cloud storage, network file storage, Bluetooth and NFC
• Providing project management and architectural support for Zscaler DLP enablement across the collaboration suite
• Authoring and presenting Low Level Designs (LLDs) for Zscaler policy sets and tenant architecture to ARB and alignment forums, keeping everything aligned to enterprise standards

Skills

Zscaler expertise

SASE framework mastery

NIST CSF & CIS Controls

Zero Trust Architecture

Azure Security & Defender

Tools

Terraform

Bicep

ARM templates

Job description

Infrastructure/Security Architect (Zscaler) - $1000-1050 a day - Immediate Start

Our client is a growing, well-backed business scaling its security architecture and they need a hands-on Solution Architect to own it end to end. This isn't BAU support, and it isn't an hands-on solution security architect role. You'll be running requirement workshops with the business, then architecting and documenting and implementing Zscaler

What you'll be doing

• Running requirement gathering workshops with business units, translating operational needs into Zscaler Zero Trust Exchange architecture and policy design
• Architecting and deploying Zscaler Internet Access (ZIA) and Private Access (ZPA) as the core SSE/SASE framework, securing remote access and web traffic
• Directing rollout of Zscaler CASB (inline and API-based) and managing SSPM across key SaaS platforms, including sensitive data scanning
• Expanding DLP and device control policy within Zscaler to lock down web DLP, personal cloud storage, network file storage, Bluetooth and NFC
• Providing project management and architectural support for Zscaler DLP enablement across the collaboration suite
• Authoring and presenting Low Level Designs (LLDs) for Zscaler policy sets and tenant architecture to ARB and alignment forums, keeping everything aligned to enterprise standards

Requirements

• Frameworks & Standards: mastery of SASE frameworks, NIST Cybersecurity Framework, CIS Controls, and Zero Trust Architecture principles
• SSE/SASE Mastery: advanced design experience with Zscaler (ZIA/ZPA)
• Cloud & Identity Security: deep expertise in Azure Security Center, Microsoft Defender for Cloud Apps, Entra ID, and Conditional Access policies
• Automation & IaC: proficiency in Terraform, Bicep, or ARM templates to implement and scale security as code

Key Ways of Working

• Architectural Leadership: translates high-level IT architectures into detailed, implementable technical designs
• Collaborative Impact: inspires technical teams and manages high-performance delivery against strategic roadmaps
• Vendor Strategy: actively manages vendor relationships to ensure technology investments align with best practices and future business needs