Zero Trust Security Architect: SASE/SSE Lead

Arctiq; Duluth (GA); Hybrid; USD 180,000 - 230,000; Full time

Job summary

Arctiq seeks a seasoned Zero Trust Security Architect to lead design, implementation, and modernization of enterprise secure access. The role focuses on migrating from legacy VPNs to SSE/SASE platforms, with hands-on engineering and collaboration across infrastructure, cloud, networking, and security teams.

The ideal candidate has 8+ years in enterprise security, strong SASE/Zero Trust expertise, and experience integrating with Entra ID, AD, LDAP, MFA, DNS, and PKI.

Qualifications

• 8+ years of experience in enterprise network security, Zero Trust, or security architecture.
• Experience designing and implementing enterprise SASE/SSE or ZTNA solutions.
• Strong understanding of SASE, SSE, and Zero Trust principles.
• Experience with Zscaler ZPA and ZIA (preferred) or Prisma Access / Cisco Secure Access.
• Strong networking knowledge: TCP/IP, routing, switching, DNS, secure remote access.
• Experience with DPI, IDS/IPS, and Advanced Malware Protection.
• Experience integrating with Microsoft Entra ID, Active Directory, LDAP, MFA, DNS, PKI.
• Experience with AWS and/or Azure.
• Strong troubleshooting and packet analysis.
• Experience deploying enterprise-scale solutions for thousands of users.
• Certifications (preferred): Zscaler/Palo Alto/Cisco.

Responsibilities

• Design and implement Zero Trust and SASE/SSE architectures.
• Lead migration initiatives from traditional VPN solutions to modern secure access platforms.
• Design secure remote access solutions for on‑premises, hybrid, and cloud environments.
• Architect security policies for user access, application segmentation, traffic inspection, and secure connectivity.
• Serve as the technical lead for enterprise Zero Trust initiatives.
• Collaborate with networking, cloud, identity, and security teams throughout project delivery.
• Evaluate and recommend enterprise SASE technologies and security architectures.
• Integrate secure access platforms with identity providers including Microsoft Entra ID, Active Directory, LDAP, MFA, DNS, and PKI.
• Support integrations with AWS, Microsoft Azure, endpoint security platforms, SD-WAN, and enterprise networking technologies.
• Troubleshoot complex network connectivity and security issues across Windows, Linux, and macOS environments.
• Develop technical standards, architecture documentation, and implementation best practices.
• Provide technical mentorship and guidance to engineering teams.
• Identify automation opportunities using PowerShell, Python, and REST APIs.

Skills

Zero Trust

SASE/SSE

ZTNA

Network Security

Packet Analysis

Troubleshooting

PowerShell

Python

REST APIs

Mentorship

Tools

Zscaler ZPA/ZIA

Palo Alto Prisma Access

Cisco Secure Access

Job description

Arctiq seeks a seasoned Zero Trust Security Architect to lead design, implementation, and modernization of enterprise secure access. The role focuses on migrating from legacy VPNs to SSE/SASE platforms, with hands-on engineering and collaboration across infrastructure, cloud, networking, and security teams.

The ideal candidate has 8+ years in enterprise security, strong SASE/Zero Trust expertise, and experience integrating with Entra ID, AD, LDAP, MFA, DNS, and PKI.