Network Security Architect

Astreya; United States; On-site; USD 170,000 - 230,000; Full time

Job summary

Astreya seeks an experienced Zero Trust Security Architect to plan, design, and optimize secure connectivity across global cloud and hybrid environments. The role emphasizes cloud VPN, Zscaler, and ZTNA to enable new platforms and secure merger and acquisition integrations.

Responsibilities include designing holistic security blueprints, secure cloud connectivity, and policy-driven guidance for implementation and operations teams.

Qualifications

• Extensive experience designing zero trust security architectures.
• Strong expertise in cloud VPN, Zscaler and ZTNA solutions.
• Ability to plan secure hybrid/multi-cloud connectivity for mergers and acquisitions.

Responsibilities

• Design and optimize security architectures for hybrid and cloud workloads.
• Plan secure cloud VPN, site-to-site VPN, and remote access using Zscaler.
• Develop ZTNA architectures with identity-aware, least-privileged access.
• Lead assessment of connectivity for new platforms and M&A integrations.
• Collaborate with cloud and infrastructure teams to enforce guardrails.

Skills

Zero Trust Architecture

Cloud Security

Zscaler

Cloud VPN

Identity & Access Management

Hybrid/Multi-cloud

Tools

Zscaler

Cloud VPN

Secure Access Service Edge (SASE)

Job description

Serve as an experienced Zero Trust Security Architect responsible for planning, designing, and optimizing secure connectivity solutions across global cloud and hybrid environments. The role requires strong expertise in cloud VPN, Zscaler, Zero Trust Network Access, and similar technologies to enable new platforms and deliver secure, scalable connectivity for merger and acquisition integrations.

Responsibilities

• Design and maintain holistic security architecture blueprints that integrate zero trust principles across identity, endpoints, networks, and applications to provide consistent protection for hybrid enterprise environments and cloud workloads.
• Plan and design secure cloud VPN, site-to-site VPN, remote access, and Zero Trust connectivity solutions using Zscaler and comparable cloud security technologies.
• Develop Zero Trust Network Access architectures that provide identity-aware, least-privileged, application-level access while reducing reliance on broad network-level trust.
• Design and optimize Zscaler capabilities, including secure internet access, private application access, traffic inspection, policy enforcement, threat prevention, and data protection.
• Lead connectivity planning and architecture for new platforms, ensuring secure integration with enterprise identity, network, cloud, application, and security services.
• Define secure connectivity strategies for mergers and acquisitions, including discovery, network and application dependency assessment, interim connectivity, segmentation, access controls, migration, and transition to the target-state Zero Trust architecture.
• Collaborate with cloud engineering and infrastructure teams to embed security guardrails policies and reference architectures that align with zero trust security and support rapid yet controlled delivery of business initiatives.
• Conduct security risk assessments focused on identity access flows and data paths documenting findings and recommending actionable architectural improvements that strengthen posture in hybrid and multicloud deployments.
• Create high-level and low-level designs, reference architectures, standards, patterns, implementation roadmaps, and reusable artifacts for cloud VPN, Zscaler, Zero Trust connectivity, and M&A integration.
• Partner with product and business stakeholders to translate security requirements into practical architecture decisions that protect intellectual property and customer data while enabling frictionless digital experiences.
• Evaluate Zscaler and similar Secure Access Service Edge, Security Service Edge, cloud VPN, and Zero Trust technologies, recommending solutions based on security, scalability, resilience, interoperability, user experience, and cost.
• Provide guidance to implementation and operations teams through reviews and walkthroughs ensuring that deployed solutions adhere to defined security architecture principles and deliver expected protection outcomes.
• Monitor effectiveness of deployed security controls using metrics and qualitative feedback then propose enhancements to policies architecture components and integration patterns for continuous improvement. -

Certifications Required

Preferred certifications include Certified Information Systems Security Professional, Zscaler certifications, and relevant cloud networking, cloud security, Zero Trust, Secure Access Service Edge, or Security Service Edge certifications.