Senior Cybersecurity Architect: Zero Trust & Cloud Lead

BioSpace; Bridgewater (MA); On-site; USD 111,000 - 145,000; Full time

Benefits offered by this job

Medical Insurance

401(k) matching

Parental leave

Paid holidays

Job summary

Legend Biotech is seeking a Senior Cybersecurity Architect/Engineer to lead the Zero Trust strategy across users, devices, applications, networks, data, and cloud environments. You will partner with Infrastructure, Cloud, and Compliance teams to implement modern security controls and continuous verification.

The role requires deep expertise in identity, network, cloud security, and data protection with hands-on experience in ZIA/ZPA and Zero Trust architecture.

Qualifications

• Bachelor's degree in Cybersecurity, IT, CS, Engineering or related field.
• Master's degree preferred.
• Zscaler Administrator (ZCCA) and Zscaler Certified Professional (ZCCP) or equivalent.
• Microsoft security certifications and CISSP/CCSP or equivalent are desirable.
• 10+ years IT infrastructure, cybersecurity or security engineering experience.

Responsibilities

• Develop the enterprise Zero Trust architecture roadmap aligned with cybersecurity objectives.
• Design security architectures based on NIST SP 800-207 and industry best practices.
• Lead enterprise-wide Zero Trust transformation across cloud, on-prem, and hybrid environments.
• Define security reference architectures, standards, and policies; review deployments.
• Lead security modernization initiatives and establish secure landing zones in cloud.
• Implement Zero Trust Network Access (ZTNA) and reduce dependency on VPNs.

Skills

Zero Trust

Zscaler

Cloud security

Identity security

Security architecture

Education

Bachelor's degree in Cybersecurity/IT/Engineering

Master's degree preferred

Tools

Zscaler ZIA/ZPA

Azure

AWS

Microsoft Defender/Purview

Job description

Legend Biotech is seeking a Senior Cybersecurity Architect/Engineer to lead the Zero Trust strategy across users, devices, applications, networks, data, and cloud environments. You will partner with Infrastructure, Cloud, and Compliance teams to implement modern security controls and continuous verification.

The role requires deep expertise in identity, network, cloud security, and data protection with hands-on experience in ZIA/ZPA and Zero Trust architecture.