Zero Trust Security Architect — Zscaler & SASE Lead

Cognizant; Santa Clara (CA); In loco; USD 134.000 - 155.000; Tempo pieno

Vantaggi offerti da questo lavoro

Medical/Dental/Vision/Life Insurance

Paid holidays plus PTO

401(k) plan and contributions

Long-term/Short-term Disability

Paid Parental Leave

Employee Stock Purchase Plan

Descrizione del lavoro

Cognizant is seeking an experienced Zero Trust Security Architect to lead design, implementation, and optimization of secure connectivity in global cloud and hybrid environments. Focus areas include ZTNA, Zscaler, cloud VPN, SASE, and SSE to support secure business operations and M&A initiatives.

Ideal candidate will have deep expertise in cloud security, identity-aware networking, and enterprise security transformation, plus strong architecture leadership and hands-on delivery capabilities.

Competenze

• 8+ years of experience in Security Architecture, Network Security, Cloud Security, or Enterprise Security Engineering roles.
• Strong expertise in Zero Trust Architecture, ZTNA, Identity-aware access controls, and Secure Connectivity solutions.
• Hands-on experience with Zscaler technologies including ZIA, ZPA, DLP, and policy management.
• Experience designing enterprise cloud VPN, remote access, hybrid-cloud networking, and secure connectivity architectures.
• Knowledge of SASE, SSE, cloud-native security architectures, and modern network security principles.
• Experience with AWS, Azure, or multi-cloud environments including security, networking, identity, and connectivity services.
• Strong knowledge of enterprise identity systems, federation, MFA, RBAC, and least-privilege access models.
• Experience supporting M&A security integration initiatives and enterprise-scale network transformation.
• Understanding of PCI-DSS, SOX, GDPR, and Zero Trust best practices.
• Architecture documentation, stakeholder management, communication, and technical leadership skills.

Mansioni

• Design and maintain enterprise Zero Trust security architectures across identity, endpoints, applications, networks, cloud platforms, and data access pathways.
• Architect secure connectivity solutions including cloud VPN, site-to-site VPN, remote access, ZTNA, and hybrid-cloud access models.
• Design, implement, and optimize Zscaler capabilities including ZIA, ZPA, DLP, traffic inspection, threat prevention, and policy enforcement.
• Define identity-aware access models based on least-privilege principles and Zero Trust security frameworks.
• Lead secure integration and connectivity planning for new business platforms and enterprise technology initiatives.
• Architect network, application, and security integration strategies for mergers and acquisitions, including discovery, segmentation, access controls, migration planning, and target-state architecture development.
• Conduct threat modeling, security risk assessments, and architecture reviews focused on access flows, trust boundaries, and data protection requirements.
• Develop architecture standards, reference architectures, design patterns, implementation roadmaps, and reusable security artifacts.
• Collaborate with cloud engineering, infrastructure, security, and application teams to embed security controls and governance requirements into technology solutions.
• Evaluate and recommend Zscaler, SASE, SSE, VPN, and Zero Trust technologies based on business, security, scalability, and operational requirements.
• Provide architecture oversight, design reviews, and implementation guidance to ensure solutions align with enterprise security standards.
• Define and monitor security metrics, effectiveness measurements, and continuous improvement initiatives to strengthen enterprise security posture.

Conoscenze

ZTNA

Zscaler

Cloud security

SASE/SSE

Identity management

RBAC

Least privilege

Security architecture

Strumenti

ZIA

ZPA

Cloud VPN

AWS/Azure/GCP

Descrizione del lavoro

Cognizant is seeking an experienced Zero Trust Security Architect to lead design, implementation, and optimization of secure connectivity in global cloud and hybrid environments. Focus areas include ZTNA, Zscaler, cloud VPN, SASE, and SSE to support secure business operations and M&A initiatives.

Ideal candidate will have deep expertise in cloud security, identity-aware networking, and enterprise security transformation, plus strong architecture leadership and hands-on delivery capabilities.