Zscaler Solutions Architect (NCS/Job/ 4023)

This is a senior enterprise security architecture role focused on designing, governing, and implementing a Zero Trust / Secure Service Edge (SSE) strategy using the Zscaler platform. The architect acts as the highest-level SME responsible for transforming traditional network security, VPNs, and perimeter-based controls into a cloud-native security model.

Key Responsibilities

1. Architecture & Strategy

Define enterprise-wide target-state architecture and technical roadmaps for Zscaler deployments.

Create and maintain:

High-Level Designs (HLDs)

Low-Level Designs (LLDs)

Data flow diagrams

Standards and operational procedures

Establish governance, security standards, and best practices.

2. Technical Solutioning & Implementation

Lead architecture and deployment of:

ZIA (Zscaler Internet Access)

ZPA (Zscaler Private Access)

ZDX (Zscaler Digital Experience)

ZCC (Zscaler Client Connector)

Design enterprise security controls including:

DLP

CASB

Browser Isolation

Integrate with:

Entra ID (Azure AD)

Okta

SAML-based Identity Providers

SIEM/SOC platforms

3. Automation & Governance

Drive Infrastructure as Code (IaC) using:

Terraform

Python

PowerShell

GitHub Actions

Lead zero-downtime migrations from:

Legacy firewalls

VPN solutions

Traditional proxy infrastructures

Act as the final escalation point for:

Major incidents

Architectural defects

Root Cause Analysis (RCA)

Required Technical Skills

Zscaler Expertise

ZIA

ZPA

ZDX

ZCC

Networking & Security

Strong understanding of:

TLS/SSL Inspection

GRE Tunnels

IPSec Tunnels

BGP Routing

DNS

SAML Authentication

Secure Web Gateway (SWG)

Zero Trust Architecture

Cloud Platforms

Hands-on architecture and deployment experience with:

Microsoft Azure

AWS

GCP

Automation

Terraform

Version Control (Git/GitHub)

Python/PowerShell scripting

Stakeholder Management Skills

Ability to:

Present complex security solutions to executives and technical teams.

Coordinate across Security, Network, Cloud, Identity, and End User Computing teams.

Lead large-scale migration and transformation programs.

Troubleshoot and make decisions during high-pressure incidents.

Preferred Certification

Highly preferred:

Zscaler Certified Cloud Architect (ZCCA)

Zscaler Certified Cloud Professional (ZCCP)