Zscaler Zero-Trust Architect for Data Protection

EY; Boston (MA); On-site; USD 126,000 - 210,000; Full time

Job summary

EY is seeking a Senior Zscaler Architect to lead secure access and data protection initiatives within a complex enterprise environment. You will translate business and regulatory requirements into practical zero-trust designs and roadmaps, guide implementation, and produce high-quality architecture artifacts.

You will collaborate with security, privacy, legal, and technology teams to shape secure, scalable, and compliant solutions across identity, endpoint, cloud, and network domains.

Qualifications

• A bachelor’s degree in Computer Science, Computer Engineering, Cybersecurity, Information Systems, Network Engineering, Data Science, Privacy, or related field, or equivalent relevant experience.
• Approximately 3–6 years of relevant experience in cybersecurity, network security, zero trust, data protection, identity, endpoint, cloud security, privacy, compliance, or related technology consulting.
• Hands-on implementation, engineering, or architecture experience with Zscaler, including ZIA or ZPA.
• Knowledge of Zscaler capabilities such as Zscaler Digital Experience, Client Connector, data protection, browser security, cloud/workload security, etc.
• Experience supporting requirements, design, integration, configuration, testing, migration, deployment, or operational transition activities for enterprise Zscaler solutions.
• Understanding of secure web gateway, zero trust network access, cloud access security broker, cloud firewall, SSL inspection, threat protection, and DLP use cases.
• Ability to communicate effectively across client conversations, workshops, and technical documentation.
• Experience in large enterprise environments with multiple stakeholders.
• Understanding of NIST, ISO 27001, CIS Controls, GDPR/CCPA, HIPAA regulations.
• Ability to travel as required by client needs.

Responsibilities

• Lead defined Zscaler security and data protection workstreams, including discovery, requirements gathering, design, configuration guidance, testing, deployment planning, and operational transition.
• Design and support solutions across Zscaler Zero Trust Exchange, with emphasis on ZIA, ZPA, ZDX, Client Connector, and related data protection capabilities.
• Develop secure internet and SaaS access designs covering secure web gateway, CASB, cloud firewall, SSL inspection, and browser isolation.
• Create zero trust private application access designs including App Connector placement and migration from legacy VPN approaches.
• Incorporate data protection requirements into Zscaler designs, including cloud DLP and integration with enterprise controls.
• Support assessments, roadmaps, and architecture activities across zero trust, secure access, data protection, cloud, identity, and endpoints.
• Facilitate client workshops and interviews with diverse security, privacy, legal, and IT stakeholders.
• Translate requirements into architecture diagrams, traffic-flow designs, and measurable outcomes.
• Create reference patterns, design decisions, and implementation guidance for clients.

Skills

Zscaler

Zero trust

Data protection

Cybersecurity

Architectural design

Stakeholder management

Education

Bachelor’s degree or equivalent experience

Tools

Zscaler Internet Access

Zscaler Private Access

SIEM

SOAR

ITSM tools

Job description

EY is seeking a Senior Zscaler Architect to lead secure access and data protection initiatives within a complex enterprise environment. You will translate business and regulatory requirements into practical zero-trust designs and roadmaps, guide implementation, and produce high-quality architecture artifacts.

You will collaborate with security, privacy, legal, and technology teams to shape secure, scalable, and compliant solutions across identity, endpoint, cloud, and network domains.