Zero-Trust Zscaler Architect & Data Protection

EY; Memphis (TN); Remote; USD 105,000 - 219,000; Full time

Benefits offered by this job

Medical and dental coverage

Pension and 401(k)

Job summary

EY is seeking a Senior Zscaler Architect to lead defined workstreams in a rapidly changing data protection and privacy landscape. You will translate business and regulatory requirements into practical zero trust designs, roadmaps, and implementation plans across identity, endpoint, network, cloud, and security operations.

You will engage with clients to design secure internet access, private access, and data protection patterns, guiding implementation and shaping architecture artifacts.

Qualifications

• Bachelor’s degree in Computer Science, Computer Engineering, Cybersecurity, Information Systems, Network Engineering, Data Science, Privacy, or related field, or equivalent relevant experience.
• Approximately 3–6 years of relevant experience in cybersecurity, network security, zero trust, data protection, identity, endpoint, cloud security, privacy, compliance, or related technology consulting.
• Required hands-on implementation, engineering, or architecture experience with Zscaler, including experience with Zscaler Internet Access or Zscaler Private Access.
• Working knowledge of additional Zscaler capabilities such as Zscaler Digital Experience, Zscaler Client Connector, data protection, browser security, cloud and workload security, or branch and campus use cases.
• Experience supporting requirements, design, integration, configuration, testing, migration, deployment, or operational transition activities for enterprise Zscaler solutions.
• Knowledge of secure web gateway, zero trust network access, cloud access security broker, cloud firewall, SSL inspection, threat protection, application segmentation, or data loss prevention use cases.
• Ability to communicate effectively through client conversations, workshops, interviews, written deliverables, presentations, and technical documentation.
• Experience supporting projects in large or complex enterprise environments involving multiple security, network, cloud, identity, endpoint, privacy, and business stakeholders.
• Understanding of zero trust, security, or privacy frameworks and regulations such as NIST, ISO 27001, CIS Controls, GDPR, CCPA/CPRA, HIPAA, or other applicable requirements.
• Ability to travel as required by client and engagement needs.

Responsibilities

• Lead defined Zscaler security and data protection workstreams, including discovery, requirements gathering, design, configuration guidance, testing, deployment planning, and operational transition.
• Design and support solutions across the Zscaler Zero Trust Exchange, with emphasis on Zscaler Internet Access, Zscaler Private Access, Zscaler Digital Experience, Zscaler Client Connector, and related data protection capabilities.
• Develop secure internet and SaaS access designs covering secure web gateway, cloud access security broker, cloud firewall, sandboxing, SSL inspection, browser isolation, threat protection, and policy enforcement patterns.
• Develop zero trust private application access designs covering application segmentation, access policies, App Connector placement, third-party access, privileged remote access, and migration from legacy VPN approaches.
• Incorporate data protection requirements into Zscaler designs, including cloud DLP, SaaS security, inline inspection, policy configuration, incident workflows, and integration with enterprise data protection controls.
• Support zero trust, secure access, data protection, cloud, branch, workload, identity, endpoint, and digital experience assessments, roadmaps, and architecture activities.
• Facilitate client workshops and stakeholder interviews across security, privacy, legal, compliance, network, infrastructure, cloud, identity, endpoint, application, data governance, and security operations teams.
• Translate requirements into architecture diagrams, traffic-flow designs, policy models, integration requirements, user stories, migration plans, test scenarios, operational procedures, and measurable outcomes.
• Create clear reference patterns, configuration standards, design decisions, executive presentations, and technical implementation guidance.
• Support integrations with identity providers, endpoint and device management platforms, SIEM and SOAR technologies, IT service management tools, network infrastructure, cloud platforms, data security tools, and other third-party controls.
• Track workstream scope, activities, risks, issues, dependencies, decisions, and status, escalating material concerns to engagement leadership when appropriate.
• Provide technical direction to junior resources, review work products for quality, and contribute to an inclusive and collaborative delivery environment.
• Support proposals, statements of work, estimates, demonstrations, and client presentations for Zscaler and zero trust opportunities.
• Develop reusable design artifacts and delivery accelerators while maintaining awareness of Zscaler platform developments and emerging zero trust, cloud, data, and AI security risks.

Skills

Zero trust

Zscaler

Security architecture

Client workshops

Policy design

Education

Bachelor's degree in CS/CE/Cybersecurity

Tools

Zscaler

Job description

EY is seeking a Senior Zscaler Architect to lead defined workstreams in a rapidly changing data protection and privacy landscape. You will translate business and regulatory requirements into practical zero trust designs, roadmaps, and implementation plans across identity, endpoint, network, cloud, and security operations.

You will engage with clients to design secure internet access, private access, and data protection patterns, guiding implementation and shaping architecture artifacts.