Zero Trust Architect (ZIA/ZPA) — Principal Consultant

Medium; Denver (CO); On-site; USD 150,000 - 300,000; Full time

Benefits offered by this job

401(k) with employer matching

Health insurance

Paid time off

Job summary

A leading tech firm in Denver is seeking a Principal Consultant to lead Zero Trust architecture implementations using Zscaler. The candidate should have over 8 years of experience in network security, emphasizing ZTNA, policy design, and optimizing secure access solutions. The role demands excellent communication and troubleshooting skills, as well as the ability to mentor engineers. Compensation ranges from $150,000 to $300,000 annually, along with full benefits including health insurance and a 401(k) plan.

Qualifications

• 8–12+ years of experience in network security, Zero Trust, or secure access architecture.
• Deep expertise in Zscaler (ZIA & ZPA), including policy design, optimization, and troubleshooting.
• Strong knowledge of networking fundamentals: DNS, TLS, proxy architectures.

Responsibilities

• Design and deliver end‑to‑end Zero Trust architectures leveraging ZTNA (ZPA), ZIA, and SSE/SASE frameworks.
• Lead full lifecycle Zscaler implementations across enterprise environments.
• Ensure all access decisions are based on identity, device posture, and context.

Skills

Network security

Zero Trust architecture

Zscaler (ZIA & ZPA)

ZTNA and SSE/SASE

Troubleshooting skills

Excellent communication

Tools

Terraform

APIs

SD-WAN platforms

Job description

A leading tech firm in Denver is seeking a Principal Consultant to lead Zero Trust architecture implementations using Zscaler. The candidate should have over 8 years of experience in network security, emphasizing ZTNA, policy design, and optimizing secure access solutions. The role demands excellent communication and troubleshooting skills, as well as the ability to mentor engineers. Compensation ranges from $150,000 to $300,000 annually, along with full benefits including health insurance and a 401(k) plan.