Zscalar/Zero Trust Security Architect - Consultant

Deloitte Development LLC; Bengaluru; On-site; INR 1,400,000 - 2,400,000; Full time

Job summary

Deloitte Development LLC in India seeks a Zscaler Architect/Senior Engineer to lead and support ZIA and ZPA implementations across enterprise environments. You will design Zero Trust access models and migrate from legacy VPNs to modern Zscaler platforms.

You will configure policies, connectors, and user-to-application connectivity while collaborating with security, network, IAM, and endpoint teams. This role is based in Hyderabad/Bengaluru/Pune/Chennai with regular India shift timings.

Qualifications

• 6-9 years of experience in network security, cloud security, or enterprise security architecture.
• Experience implementing and migrating Zscaler Internet Access (ZIA) and Zscaler Private Access (ZPA) in enterprise environments.
• Experience configuring ZIA security policies, including URL filtering, SSL inspection, authentication, forwarding methods, and access controls.
• Experience configuring ZPA application segmentation, connector deployment, access policies, and user-to-application connectivity.
• Experience integrating Zscaler with identity and security platforms (e.g., Microsoft Entra ID, Okta, SAML, SCIM, SIEM, EDR, CASB).
• Experience with DNS, TCP/IP, routing, firewall policies, proxy technologies, and VPN migration.
• Experience creating technical documentation (architecture diagrams, runbooks, migration plans, handover materials).

Responsibilities

• Leading and supporting the implementation, configuration, and migration of ZIA and ZPA solutions.
• Assessing current-state network and security architecture and designing Zero Trust access models.
• Planning and executing migration from legacy VPN, proxy, and remote access technologies to Zscaler platforms.
• Configuring ZIA and ZPA policies, application segmentation, connector deployment, authentication, forwarding methods, and user-to-application connectivity.
• Troubleshooting connectivity, performance, and policy issues; supporting pilot, rollout, cutover, and post-migration activities.

Skills

Zscaler Architecture

Network Security

Cloud Security

ZIA/ZPA Migration

Stakeholder Collaboration

Tools

Zscaler

Job description

Zscalar/Zero Trust
L35 - Consultant

We are seeking an experienced Zscaler Architect / Senior Engineer to lead and support the implementation, configuration, and migration of Zscaler Internet Access (ZIA) and Zscaler Private Access (ZPA) solutions in enterprise environments. This role will help design and deliver Zero Trust access models, modernize remote access, and support migration from legacy VPN and proxy technologies. The ideal candidate brings strong hands-on Zscaler delivery experience, solid network security fundamentals, and the ability to work across security, network, IAM, and endpoint teams.

Work you'll do

As a Consultant on the Cyber team, you will be responsible for:

• Leading and supporting the implementation, configuration, and migration of Zscaler Internet Access (ZIA) and Zscaler Private Access (ZPA) solutions.


• Assessing current-state network and security architecture and designing Zero Trust access models aligned to business and security requirements.


• Planning and executing migration from legacy VPN, proxy, and remote access technologies to Zscaler platforms.


• Configuring ZIA and ZPA policies, application segmentation, connector deployment, authentication, forwarding methods, and user-to-application connectivity.


• Troubleshooting connectivity, performance, and policy issues and supporting pilot, rollout, cutover, and post-migration activities.

The team

Deloitte's Cyber team helps organizations build, operate, and enhance security capabilities across identity, network, cloud, and application environments. The team works with clients to modernize security architecture, enable secure access, and support enterprise transformation through scalable, business-aligned solutions. Professionals in this practice collaborate across cybersecurity, infrastructure, and technology stakeholders to address complex security and connectivity challenges.

Location: Hyderabad/Bengaluru/Pune/Chennai

Shift Timings: Regular India Shift Timing

Qualifications

Required:

• 6-9 years of experience in network security, cloud security, or enterprise security architecture.


• Experience implementing and migrating Zscaler Internet Access (ZIA) and Zscaler Private Access (ZPA) in enterprise environments.


• Experience configuring ZIA security policies, including URL filtering, Secure Sockets Layer (SSL) inspection, authentication, forwarding methods, and access controls.


• Experience configuring ZPA application segmentation, connector deployment, access policies, and user-to-application connectivity.


• Experience integrating Zscaler with identity and security platforms, including Microsoft Entra ID, Okta, Security Assertion Markup Language (SAML), System for Cross-domain Identity Management (SCIM), security information and event management (SIEM), endpoint detection and response (EDR), or cloud access security broker (CASB) tools.


• Experience with Domain Name System (DNS), Transmission Control Protocol/Internet Protocol (TCP/IP), routing, firewall policies, proxy technologies, and VPN migration.


• Experience creating technical documentation, including architecture diagrams, runbooks, migration plans, and operational handover materials.

Preferred:

• Experience designing Zero Trust Network Access (ZTNA) solutions and remote access modernization programs.


• Experience with Zscaler Digital Experience (ZDX) for experience monitoring and user troubleshooting.


• Experience deploying Zscaler Client Connector and integrating with endpoint platforms.


• Experience with Microsoft Azure, Amazon Web Services (AWS), or Google Cloud Platform (GCP).


• Experience supporting large-scale enterprise transformation or network security modernization programs.


• Zscaler Certified Cloud Administrator (ZCCA), Zscaler Certified Cloud Professional (ZCCP) for ZIA or ZPA, or Zscaler Certified Cloud Specialist (ZCCS).

This position is aligned with the Core Talent Model. To view the associated benefit package, please reference this document https://resources.deloitte.com/sites/dnet-tod-usi/Shared Documents/Benefits/USIBenefitsBrochureforPlanG.pdf