Cyber Security Architect

Cognizant; Pune District; Hybrid; INR 350,000 - 550,000; Full time

Job summary

Cognizant is seeking an experienced Cyber Security Architect for a hybrid role focusing on designing, implementing, and optimizing secure access solutions centered on Zscaler Internet Access (ZIA) and Zscaler Private Access (ZPA) for a large global enterprise.

You will collaborate with network, security, and operations teams to ensure resilient connectivity, align controls with business goals, and continuously strengthen the organization’s cyber posture while supporting day-to-day operations.

Qualifications

• Extensive hands-on experience designing and implementing large-scale ZIA solutions with identity platform integration.
• Strong expertise with ZPA including app discovery, micro-segmentation, and secure connectivity for hybrid workloads.
• Deep knowledge of network security concepts and zero-trust architectures relevant to secure access design.
• Solid understanding of enterprise networking fundamentals to integrate Zscaler without degradation.
• Experience with security monitoring, incident response, and logs analytics.
• Familiarity with regulatory security standards and translating compliance into Zscaler policies.

Responsibilities

• Design and architect secure internet and private application access solutions using ZIA and ZPA to protect users, apps, and data.
• Evaluate existing architectures and propose Zscaler-based transformation roadmaps to improve threat protection and connectivity.
• Configure and optimize ZIA policies including secure web gateway controls, AP protection, and data protection rules.
• Configure and optimize ZPA architectures with granular access policies and IDP integrations.
• Collaborate with teams to integrate Zscaler with routing, directory services, and logging systems.
• Develop and maintain design documents and configuration baselines for ZIA/ZPA deployments.
• Conduct security risk assessments and translate findings into Zscaler policy changes.
• Implement monitoring and alerting for Zscaler platforms using logs and analytics.
• Provide guidance to operations on Zscaler features and troubleshooting practices.
• Coordinate and execute user access and traffic migrations to Zscaler with fallback steps.
• Review access control models to align with zero-trust principles.
• Champion secure-by-design practices in projects relying on internet/private access.
• Analyze metrics and feedback to optimize ZIA/ZPA usage.

Skills

Zscaler Internet Access

Zscaler Private Access

Zero Trust

Security Architecture

Threat Protection

Job description

Job Summary

This hybrid role for an experienced cyber security architect focuses on designing implementing and optimizing secure access solutions centered on Zscaler Internet Access and Zscaler Private Access for a large global enterprise. The architect will ensure resilient secure connectivity align security controls with business objectives and continuously strengthen the organization cyber posture to safeguard data systems and users while supporting day operations.

Responsibilities

• Design and architect secure internet and private application access solutions using Zscaler Internet Access and Zscaler Private Access to protect enterprise users applications and data while ensuring consistent performance across hybrid work environments.
• Evaluate existing network and security architectures and propose detailed Zscaler based transformation roadmaps that improve threat protection reduce attack surface and streamline secure connectivity for day to day business operations.
• Configure and optimize Zscaler Internet Access policies including secure web gateway controls advanced threat protection and data protection rules to balance risk reduction with user experience and business productivity.
• Configure and optimize Zscaler Private Access architectures including application segmentation granular access policies and integrations with identity providers to deliver secure zero trust remote access without reliance on traditional virtual private network solutions.
• Collaborate with network infrastructure and application teams to integrate Zscaler platforms with routing directory services and logging systems so that secure access controls are consistently applied across on premise and cloud environments.
• Develop and maintain detailed technical design documents standards and configuration baselines for Zscaler Internet Access and Zscaler Private Access deployments to ensure repeatable implementation and operational stability.
• Conduct security risk assessments focused on internet and private access pathways and translate findings into actionable Zscaler policy changes that close gaps mitigate emerging threats and support regulatory and internal compliance expectations.
• Implement robust monitoring and alerting for Zscaler platforms using integrated logging and analytics tools to quickly detect anomalies investigate security events and support incident response activities.
• Provide technical guidance to operations and support teams on Zscaler features configuration changes and troubleshooting practices so that production environments remain stable and security incidents are handled efficiently.
• Coordinate and execute user access and traffic migration plans to Zscaler solutions with clear communication testing and fallback steps to minimize disruption while enhancing security posture for distributed workforce scenarios.
• Review and refine access control models authentication flows and policy structures to align Zscaler deployments with zero trust principles reducing lateral movement opportunities and strengthening protection for business critical applications.
• Champion secure by design practices in projects that rely on internet and private access by advising on Zscaler capabilities recommending secure patterns and ensuring architecture decisions support long term resilience and innovation.
• Analyze platform metrics and user feedback to identify optimization opportunities in Zscaler Internet Access and Zscaler Private Access usage driving continuous improvement that benefits the company service quality and contributes to safer digital interactions across society.

Qualifications

• Demonstrate extensive hands on experience designing and implementing large scale Zscaler Internet Access solutions including policy design integration with identity platforms and performance tuning in complex enterprise environments.
• Demonstrate strong practical expertise with Zscaler Private Access including application discovery micro segmentation strategies and secure connectivity patterns for hybrid and cloud hosted workloads.
• Possess deep knowledge of network security concepts such as secure web gateway controls firewalling proxy technologies transport layer security domain name system security and zero trust architectures relevant to secure access design.
• Possess solid understanding of enterprise networking fundamentals including routing switching virtual private network alternatives network address translation and load balancing to integrate Zscaler solutions effectively without degradation of service.
• Apply experience with security monitoring and incident response using logs and analytics from secure access platforms to investigate threats support forensics and recommend durable improvements to policies and configurations.
• Apply familiarity with regulatory and industry security standards and demonstrate ability to translate compliance requirements into practical Zscaler policies and technical controls that support organizational obligations.