Zero-trust VPN Security

Astreya Partners, LLC; New York (NY); On-site; USD 154,000 - 242,000; Full time

Benefits offered by this job

Medical and dental benefits

401k plan

Paid time off

Tuition reimbursement

Life insurance

Disability insurance

Paid holidays

Job summary

Astreya Partners, LLC is seeking an experienced Zero Trust Security Architect to plan, design, and optimize secure connectivity across global cloud and hybrid environments. You will drive secure platform integrations and M&A connectivity with a focus on identity, networks, and applications.

You'll design cloud VPN and Zscaler-based solutions, develop zero trust access architectures, and guide security guardrails with engineering teams to enable scalable, compliant deployments.

Qualifications

• Experience designing and implementing zero trust security architectures across cloud and hybrid environments.
• Strong expertise in Zscaler, cloud VPN, and secure connectivity for M&A integrations.
• Ability to translate security requirements into practical architecture decisions.

Responsibilities

• Design and maintain security architecture blueprints across identity, endpoints, networks, and applications.
• Plan secure cloud VPN, site-to-site VPN, remote access, and zero trust connectivity using Zscaler.
• Develop identity-aware, least-privileged access models for NaaS.
• Lead architecture for mergers and acquisitions including interim connectivity and migration.
• Collaborate with cloud and infrastructure teams to embed guardrails and reference architectures.
• Conduct risk assessments focused on identity flows and data paths in hybrid/multicloud deployments.

Skills

Zero Trust Architecture

Zscaler

Cloud VPN

Tools

Zscaler

Cloud VPN

Job description

Job Summary

Serve as an experienced Zero Trust Security Architect responsible for planning, designing, and optimizing secure connectivity solutions across global cloud and hybrid environments. The role requires strong expertise in cloud VPN, Zscaler, Zero Trust Network Access, and similar technologies to enable new platforms and deliver secure, scalable connectivity for merger and acquisition integrations.

Responsibilities

• Design and maintain holistic security architecture blueprints that integrate zero trust principles across identity, endpoints, networks, and applications to provide consistent protection for hybrid enterprise environments and cloud workloads.
• Plan and design secure cloud VPN, site-to-site VPN, remote access, and Zero Trust connectivity solutions using Zscaler and comparable cloud security technologies.
• Develop Zero Trust Network Access architectures that provide identity-aware, least-privileged, application-level access while reducing reliance on broad network-level trust.
• Design and optimize Zscaler capabilities, including secure internet access, private application access, traffic inspection, policy enforcement, threat prevention, and data protection.
• Lead connectivity planning and architecture for new platforms, ensuring secure integration with enterprise identity, network, cloud, application, and security services.
• Define secure connectivity strategies for mergers and acquisitions, including discovery, network and application dependency assessment, interim connectivity, segmentation, access controls, migration, and transition to the target-state Zero Trust architecture.
• Collaborate with cloud engineering and infrastructure teams to embed security guardrails policies and reference architectures that align with zero trust security and support rapid yet controlled delivery of business initiatives.
• Conduct security risk assessments focused on identity access flows and data paths documenting findings and recommending actionable architectural improvements that strengthen posture in hybrid and multicloud deployments.
• Create high-level and low-level designs, reference architectures, standards, patterns, implementation roadmaps, and reusable artifacts for cloud VPN, Zscaler, Zero Trust connectivity, and M&A integration.
• Partner with product and business stakeholders to translate security requirements into practical architecture decisions that protect intellectual property and customer data while enabling frictionless digital experiences.
• Evaluate Zscaler and similar Secure Access Service Edge, Security Service Edge, cloud VPN, and Zero Trust technologies, recommending solutions based on security, scalability, resilience, interoperability, user experience, and cost.
• Provide guidance to implementation and operations teams through reviews and walkthroughs ensuring that deployed solutions adhere to defined security architecture principles and deliver expected protection outcomes.
• Monitor effectiveness of deployed security controls using metrics and qualitative feedback then propose enhancements to policies architecture components and integration patterns for continuous improvement.

Certifications Required

Preferred certifications include Certified Information Systems Security Professional, Zscaler certifications, and relevant cloud networking, cloud security, Zero Trust, Secure Access Service Edge, or Security Service Edge certifications.

Salary Range

Salary Range $153,520.00 - $242,400.00 USD (Salary) Please note that the salary information provided herein is base pay only (gross); it does not include other forms of compensation which may or may not apply to this specific position, namely, performance-based bonuses, benefits-related payments, or other general incentives - none of which are guaranteed, may be subject to specific eligibility requirements, and are wholly within the discretion of Astreya to remit. Further, the salary information noted above is a range that consists of a minimum and maximum rate of pay for this specific position. Where an applicant or employee is placed on this range will depend and be contingent on objective, documented work-related considerations like education, experience, certifications, licenses, preferred qualifications, among other factors.

Benefits

• Medical provided through UHC (PPO, HSA, Surest options)
• Medical provided through Kaiser (HMO option only) for California employees only
• Dental provided through UHC Nationwide
• Vision provided by UHC
• Flexible Spending Account for Health & Dependent Care Pre-Tax Account for Commuter Benefit/Parking & Transit (location-specific)
• Continuing Education and Professional Development via various integrated platforms, e.g. Udemy and Coursera
• Corporate Wellness Program provided by Goomi Group
• Employee Assistance Program
• Wellness Days
• 401k Plan
• Basic and Supplemental Life Insurance
• Short Term & Long Term Disability
• Critical Illness, Critical Hospital, and Voluntary Accident Insurance
• Tuition Reimbursement (available 6 months after start date, capped)
• Paid Time Off (accrued and prorated, maximum of 120 hours annually)
• Paid Holidays
• Any other statutory leaves, paid time, or other ancillary benefits required under state and federal law

About Us

We’re so glad you’re here. Use this space to explore career opportunities, track your application, and take next steps with a global team that values people and progress.

Astreya is a global IT managed services provider dedicated to creating technology solutions that are reliable and human-centered. We partner with the world’s most innovative organizations to optimize modern IT environments across the digital workplace, cloud, data, AI, and enterprise platforms. Our people are our strength. Across regions and roles, Astreyans bring deep expertise, curiosity, and a commitment to excellence. We believe great technology starts with great humans, which is why we invest in learning, collaboration, and career growth. At Astreya, transparency, accountability, and trust guide how we work with each other and our customers. We foster an inclusive culture where diverse perspectives are valued and everyone has the opportunity to make an impact. Join us to build solutions that matter and shape the future of IT together. Onwards and upwards!