Zscaler Security Architect

NATIONMIND LLC; Cincinnati (OH); Remote; USD 140,000 - 200,000; Full time

Job summary

NationMind LLC is hiring a Zscaler Security Architect for remote work. The role focuses on designing enterprise Zscaler architectures, leading ZIA/ZPA deployments, and shaping Zero Trust/SASE roadmaps across global environments.

You will collaborate with IAM, network, cloud, and SOC teams, delivering runbooks and architecture standards while mentoring engineering staff and ensuring compliant security controls.

Qualifications

• 10+ years of cybersecurity experience with architecture and consulting.
• 5+ years hands-on Zscaler architecture, design, deployment, and optimization.
• Experience leading global Zscaler or SASE transformation engagements.
• Strong knowledge of enterprise networking, cloud security, identity, and endpoint security.
• Ability to interact with executive stakeholders and delivery teams.
• Experience in multi-vendor security environments and managed services transitions.

Responsibilities

• Design and implement enterprise-scale Zscaler architectures supporting Zero Trust principles.
• Lead ZIA and ZPA deployment, migration, and optimization initiatives across global environments.
• Define secure internet access, private application access, SaaS security, and cloud access strategies.
• Develop SASE and Zero Trust roadmaps aligned with business, security, compliance, and operational goals.
• Assess current architectures and identify modernization and risk-reduction opportunities.
• Design secure access for cloud, on-premise, hybrid, and remote environments.
• Integrate Zscaler with IAM platforms like Azure AD, Okta, Ping Identity, etc.
• Implement application segmentation with ZPA and Zero Trust policies.
• Govern URL filtering, CASB, Cloud Firewall, DLP, SSL inspection, and data protection policies.
• Support network transformations reducing VPN dependency.
• Collaborate with cross-functional teams to implement security controls.
• Lead troubleshooting and remediation of Zscaler and policy issues.
• Develop standards, reference designs, migration plans, runbooks, and handover docs.
• Provide governance, risk, and compliance guidance for Zscaler implementations.
• Mentor engineering teams and lead project delivery and managed services transitions.

Skills

ZIA/ZPA/ZDX expertise

Zero Trust / SASE

Zscaler architecture design

IAM integration

HLD/LLD & runbooks

Client-facing communication

Job description

About NationMind LLC:

NationMind LLC is a technology consulting firm focused on software development and QA testing services. We help clients build reliable, scalable applications with a strong emphasis on automation, performance, and quality. Our team works across industries, delivering solutions that drive innovation and operational efficiency. We are currently hiring skilled professionals for Zscaler Security Architect to join our growing team.

Zscaler Security Architect

Remote

Key Responsibilities:

• Design and implement enterprise-scale Zscaler architectures supporting Zero Trust principles.
• Lead ZIA and ZPA deployment, migration, and optimization initiatives across global environments.
• Define secure internet access, private application access, SaaS security, and cloud access strategies.
• Develop SASE and Zero Trust roadmaps aligned with business, security, compliance, and operational goals.
• Conduct current-state architecture assessments and identify opportunities for modernization and risk reduction.
• Design secure access solutions for cloud, on-premise, hybrid, and remote workforce environments.
• Integrate Zscaler solutions with Identity Providers such as Microsoft Entra ID / Azure AD, Okta, Ping Identity, and other IAM platforms.
• Implement application segmentation strategies using ZPA and Zero Trust access policies.
• Design and govern URL filtering, CASB, Cloud Firewall, DLP, SSL inspection, sandboxing, and data protection policies.
• Support network transformation programs replacing or reducing dependency on traditional VPN architectures.
• Collaborate with network, cloud, IAM, endpoint, SOC, and GRC teams to implement effective security controls.
• Lead troubleshooting and remediation of complex Zscaler, traffic steering, authentication, and policy-related issues.
• Develop architecture standards, reference designs, HLDs, LLDs, migration plans, runbooks, and operational handover documents.
• Provide governance, risk, control, and compliance guidance related to Zscaler implementations.
• Mentor engineering teams and provide technical leadership for project delivery and managed services transition.

Mandatory Skills:

• Expert-level hands-on experience with Zscaler Internet Access (ZIA), Zscaler Private Access (ZPA), and Zscaler Digital Experience (ZDX).
• Strong understanding of Zero Trust, SASE, secure web gateway, cloud firewall, CASB, DLP, and traffic inspection concepts.
• Proven experience designing Zscaler architecture for large enterprise and global transformation programs.
• Ability to integrate Zscaler with IAM, endpoint, network, cloud, and SOC/security monitoring ecosystems.
• Experience preparing HLD/LLD, migration plans, implementation playbooks, test plans, and operational transition documents.
• Excellent customer-facing communication, stakeholder management, and technical presentation skills.

Job Requirements:

• 10+ years of overall Cyber Security experience with architecture and consulting exposure.
• 5+ years of hands-on Zscaler architecture, design, deployment, and optimization experience.
• Experience leading global Zscaler or SASE transformation engagements.
• Strong knowledge of enterprise networking, cloud security, identity, and endpoint security integration.
• Ability to interact with executive stakeholders, customer security leadership, architects, and delivery teams.
• Experience in multi-vendor security environments and managed services transition.