Zero-trust VPN Security

Astreya•New York, NY

About The Position

Serve as an experienced Zero Trust Security Architect responsible for planning, designing, and optimizing secure connectivity solutions across global cloud and hybrid environments. The role requires strong expertise in cloud VPN, Zscaler, Zero Trust Network Access, and similar technologies to enable new platforms and deliver secure, scalable connectivity for merger and acquisition integrations. The position develops security architecture and connectivity strategies spanning identity, endpoints, networks, applications, cloud workloads, and hybrid enterprise environments. It produces architecture designs and reusable standards, guides implementation and operations teams, assesses risks and control effectiveness, and recommends ongoing improvements. The role also evaluates technologies and partners with cloud engineering, infrastructure, product, and business stakeholders to enable secure, scalable delivery while protecting intellectual property and customer data. The preferred certifications include Certified Information Systems Security Professional (CISSP), Zscaler certifications, and relevant cloud networking, cloud security, Zero Trust, Secure Access Service Edge, or Security Service Edge certifications.

Nice To Haves

Certified Information Systems Security Professional (CISSP) certification.
Zscaler certifications.
Relevant cloud networking, cloud security, Zero Trust, Secure Access Service Edge, or Security Service Edge certifications.

Responsibilities

Design and maintain holistic security architecture blueprints integrating Zero Trust principles across identity, endpoints, networks, and applications for hybrid enterprise environments and cloud workloads.
Plan and design secure cloud VPN, site-to-site VPN, remote access, and Zero Trust connectivity solutions using Zscaler and comparable cloud security technologies.
Develop Zero Trust Network Access architectures providing identity-aware, least-privileged, application-level access while reducing reliance on broad network-level trust.
Design and optimize Zscaler capabilities, including secure internet access, private application access, traffic inspection, policy enforcement, threat prevention, and data protection.
Lead connectivity planning and architecture for new platforms, ensuring secure integration with enterprise identity, network, cloud, application, and security services.
Define secure connectivity strategies for mergers and acquisitions, including discovery, network and application dependency assessment, interim connectivity, segmentation, access controls, migration, and transition to the target-state Zero Trust architecture.
Collaborate with cloud engineering and infrastructure teams to embed security guardrails, policies, and reference architectures aligned with Zero Trust security.
Conduct security risk assessments focused on identity access flows and data paths, document findings, and recommend actionable architectural improvements for hybrid and multicloud deployments.
Create high-level and low-level designs, reference architectures, standards, patterns, implementation roadmaps, and reusable artifacts for cloud VPN, Zscaler, Zero Trust connectivity, and M&A integration.
Partner with product and business stakeholders to translate security requirements into practical architecture decisions that protect intellectual property and customer data while enabling frictionless digital experiences.
Evaluate Zscaler and similar Secure Access Service Edge, Security Service Edge, cloud VPN, and Zero Trust technologies, recommending solutions based on security, scalability, resilience, interoperability, user experience, and cost.
Guide implementation and operations teams through reviews and walkthroughs to ensure deployed solutions adhere to security architecture principles and deliver expected protection outcomes.
Monitor the effectiveness of deployed security controls using metrics and qualitative feedback, and propose enhancements to policies, architecture components, and integration patterns.

Benefits

Medical coverage through UHC (PPO, HSA, and Surest options) or Kaiser (HMO option for California employees only).
Dental insurance through UHC Nationwide.
Vision insurance through UHC.
Flexible Spending Accounts for health and dependent care.
Pre-tax commuter benefit for parking and transit, where available.
Continuing education and professional development through platforms such as Udemy and Coursera.
Corporate wellness program provided by Goomi Group.
Employee Assistance Program.
Wellness Days.
401(k) plan.
Basic and supplemental life insurance.
Short-term and long-term disability insurance.
Critical illness, critical hospital, and voluntary accident insurance.
Tuition reimbursement, available six months after the start date and subject to a cap.
Paid time off accrued and prorated, up to 120 hours annually.
Paid holidays.
Statutory leaves, paid time, and other ancillary benefits required under state and federal law.