Security Architect

TechDigital Group; Dallas (TX); On-site; USD 150,000 - 230,000; Full time

Job summary

TechDigital Group seeks an Experienced Security Architect with 10–15+ years of cybersecurity and network security expertise to lead SSE solutions, ensure alignment with business and compliance, and govern architecture across design, migration, and production.

The role requires strong leadership in security governance, risk assessment, and implementation of Zero Trust, SASE, and cloud security strategies within enterprise environments.

Qualifications

• Bachelor's degree in computer science, information technology, engineering, cybersecurity, or related field.
• Master's degree preferred.

Responsibilities

• Lead architecture, design, and deployment strategy for SSE platforms including SWG, ZTNA, UAG, and Threat Prevention.
• Conduct workshops and assess current-state network, security, identity, and application architecture.
• Develop High-Level Design (HLD) and Low-Level Design (LLD) documents.
• Define architecture standards, security controls, and implementation best practices.
• Provide technical governance during rollout, testing, and cutover activities.
• Review policies, access models, segmentation strategies, and compliance requirements.
• Lead risk assessments and mitigation planning.

Skills

SSE/SASE Platforms

Zero Trust

Cloud Security

IAM

Network Security

Threat Prevention

Education

Bachelor's degree in CS/IT/Engineering

Master's degree preferred

Tools

Palo Alto Prisma Access

Zscaler

Netskope

Job description

Experienced Security Architect with 10-15+ years of cybersecurity and network security experience, including 5+ years in SASE/SSE, Zero Trust, cloud security, and enterprise security transformations. Responsible for leading the architecture, design, and technical governance of SSE solutions, ensuring alignment with business, security, compliance, and operational requirements. Provides technical leadership throughout design, implementation, migration, and transition phases.

Roles & Responsibilities

• Lead architecture, design, and deployment strategy for SSE platforms, including SWG, ZTNA, Secure Browser, DEM, URL Filtering, and Threat Prevention.
• Conduct discovery workshops and assess current-state network, security, identity, and application architecture.
• Develop High-Level Design (HLD) and Low-Level Design (LLD) documents.
• Define architecture standards, security controls, and implementation best practices.
• Design traffic steering, service connection, routing, authentication, and policy frameworks.
• Provide technical leadership during implementation, migration, testing, and rollout activities.
• Review and validate security policies, user access models, segmentation strategies, and compliance requirements.
• Lead technical risk assessments and mitigation planning.
• Support UAT planning, design validation, and production readiness reviews.
• Provide governance and oversight during cutover and hypercare phases.
• Drive knowledge transfer and transition to operational support teams.

Educational Qualification

• Bachelor's degree in computer science, Information Technology, Engineering, Cybersecurity, or related field.
• Master's degree preferred

Skills & Certifications

Technical Skills

• SSE/SASE Platforms (Palo Alto Prisma Access, Zscaler, Netskope, Cisco SSE or equivalent)
• Secure Web Gateway (SWG)
• Zero Trust Network Access (ZTNA)
• Identity & Access Management (SSO, MFA, Conditional Access)
• Cloud Security (AWS, Azure, GCP)
• Network Security and Routing Concepts
• VPN Technologies and Traffic Steering
• SIEM and Security Integrations
• Threat Prevention, URL Filtering, SSL Inspection
• Security Architecture and Enterprise Design

Preferred Certifications

• CISSP
• CCSP
• PCNSE / Palo Alto Prisma Access
• Zscaler Certified Architect
• CCIE Security / CCNP Security
• Azure Security Engineer or equivalent