Zero Trust Security Architect

Arctiq; Duluth (GA); On-site; USD 180,000 - 230,000; Full time

Job summary

Arctiq seeks a seasoned Zero Trust Security Architect to lead design, implementation, and modernization of enterprise secure access. The role focuses on migrating from legacy VPNs to SSE/SASE platforms, with hands-on engineering and collaboration across infrastructure, cloud, networking, and security teams.

The ideal candidate has 8+ years in enterprise security, strong SASE/Zero Trust expertise, and experience integrating with Entra ID, AD, LDAP, MFA, DNS, and PKI.

Qualifications

• 8+ years of experience in enterprise network security, Zero Trust, or security architecture.
• Experience designing and implementing enterprise SASE/SSE or ZTNA solutions.
• Strong understanding of SASE, SSE, and Zero Trust principles.
• Experience with Zscaler ZPA and ZIA (preferred) or Prisma Access / Cisco Secure Access.
• Strong networking knowledge: TCP/IP, routing, switching, DNS, secure remote access.
• Experience with DPI, IDS/IPS, and Advanced Malware Protection.
• Experience integrating with Microsoft Entra ID, Active Directory, LDAP, MFA, DNS, PKI.
• Experience with AWS and/or Azure.
• Strong troubleshooting and packet analysis.
• Experience deploying enterprise-scale solutions for thousands of users.
• Certifications (preferred): Zscaler/Palo Alto/Cisco.

Responsibilities

• Design and implement Zero Trust and SASE/SSE architectures.
• Lead migration initiatives from traditional VPN solutions to modern secure access platforms.
• Design secure remote access solutions for on‑premises, hybrid, and cloud environments.
• Architect security policies for user access, application segmentation, traffic inspection, and secure connectivity.
• Serve as the technical lead for enterprise Zero Trust initiatives.
• Collaborate with networking, cloud, identity, and security teams throughout project delivery.
• Evaluate and recommend enterprise SASE technologies and security architectures.
• Integrate secure access platforms with identity providers including Microsoft Entra ID, Active Directory, LDAP, MFA, DNS, and PKI.
• Support integrations with AWS, Microsoft Azure, endpoint security platforms, SD-WAN, and enterprise networking technologies.
• Troubleshoot complex network connectivity and security issues across Windows, Linux, and macOS environments.
• Develop technical standards, architecture documentation, and implementation best practices.
• Provide technical mentorship and guidance to engineering teams.
• Identify automation opportunities using PowerShell, Python, and REST APIs.

Skills

Zero Trust

SASE/SSE

ZTNA

Network Security

Packet Analysis

Troubleshooting

PowerShell

Python

REST APIs

Mentorship

Tools

Zscaler ZPA/ZIA

Palo Alto Prisma Access

Cisco Secure Access

Job description

Company Overview

Arctiq is a global, intelligence-driven technology services company delivering professional and managed services across Hybrid Cloud Infrastructure, Networking & Connected Experiences, Cybersecurity, Data & AI, Autonomous Operations & Intelligence, and Enterprise Service Management. We help organizations operate, secure, and modernize complex environments by unifying infrastructure, networking, data, security, automation, and observability under a single, integrated operating model. Our work focuses on helping customers reduce operational friction, improve resilience, and make better, faster decisions as their environments evolve. Arctiq builds on decades of industry expertise and a customer-centric ethos to deliver exceptional value to clients across diverse industries.

Position Overview

We are seeking a Zero Trust Security Architect to lead the design, implementation, and modernization of enterprise secure access solutions. This role is responsible for helping drive our Zero Trust transformation by designing scalable, secure remote access architectures while supporting the migration from legacy VPN technologies to modern Security Service Edge (SSE) and Secure Access Service Edge (SASE) platforms. The ideal candidate will possess deep expertise in enterprise network security and Zero Trust architectures with hands‑on experience implementing leading SASE solutions. While experience with Zscaler ZPA and ZIA is highly preferred, we are also interested in candidates with strong implementation experience using Palo Alto Prisma Access, Cisco Secure Access, or comparable enterprise SASE platforms. This position requires a combination of architecture, strategy, and hands‑on engineering, partnering closely with infrastructure, cloud, networking, and security teams to deliver enterprise‑scale secure access solutions. This is a hybrid (Atlanta, GA) contract opportunity for a project Arctiq is delivering for a client. This position is based in Atlanta and requires working onsite three mandatory days per week (Tuesday‑Thursday).

Responsibilities

• Design and implement enterprise Zero Trust and SASE/SSE architectures.
• Lead migration initiatives from traditional VPN solutions to modern secure access platforms.
• Design secure remote access solutions supporting on-premises, hybrid, and cloud environments.
• Architect security policies for user access, application segmentation, traffic inspection, and secure connectivity.
• Serve as the technical lead for enterprise Zero Trust initiatives.
• Collaborate with networking, cloud, identity, and security teams throughout project delivery.
• Evaluate and recommend enterprise SASE technologies and security architectures.
• Integrate secure access platforms with identity providers including Microsoft Entra ID, Active Directory, LDAP, MFA, DNS, and PKI.
• Support integrations with AWS, Microsoft Azure, endpoint security platforms, SD-WAN, and enterprise networking technologies.
• Troubleshoot complex network connectivity and security issues across Windows, Linux, and macOS environments.
• Develop technical standards, architecture documentation, and implementation best practices.
• Provide technical mentorship and guidance to engineering teams.
• Identify automation opportunities using PowerShell, Python, and REST APIs.

Qualifications

• 8+ years of experience in enterprise network security, Zero Trust, or security architecture.
• Experience designing and implementing enterprise SASE/SSE or Zero Trust Network Access (ZTNA) solutions.
• Strong understanding of SASE, SSE, and Zero Trust architecture principles.
• Experience with one or more of the following platforms:
  • Zscaler ZPA and ZIA (preferred)
  • Palo Alto Prisma Access
  • Cisco Secure Access
• Strong understanding of enterprise networking, including TCP/IP, routing, switching, DNS, and secure remote access.
• Experience with current-generation and next-generation firewall technologies and security policy management.
• Knowledge of:
  • Deep Packet Inspection (DPI)
  • Intrusion Detection and Prevention Systems (IDS/IPS)
  • Advanced Malware Protection technologies
• Experience integrating secure access platforms with:
  • Microsoft Entra ID
  • Active Directory
  • LDAP
  • MFA
  • DNS
  • PKI
• Experience supporting AWS and/or Microsoft Azure environments.
• Strong troubleshooting and packet analysis skills.
• Experience with enterprise-scale deployments supporting thousands of users.
• (Preferred) Deep experience with Zscaler ZPA and ZIA implementations.
• (Preferred) Zscaler, Palo Alto, Cisco, or other relevant security certifications.

Arctiq is an equal opportunity employer. If you need any accommodations or adjustments throughout the interview process and beyond, please let us know. We celebrate our inclusive work environment and welcome members of all backgrounds and perspectives to apply.