Zero-trust VPN Security

Astreya•New York, NY

7d•$153,520 - $242,400

About The Position

Serve as an experienced Zero Trust Security Architect responsible for planning, designing, and optimizing secure connectivity solutions across global cloud and hybrid environments. The role requires expertise in cloud VPN, Zscaler, Zero Trust Network Access, and similar technologies to enable new platforms and secure, scalable connectivity for merger and acquisition integrations. The position develops security architecture, connectivity strategies, designs, and implementation roadmaps, and partners with engineering, infrastructure, product, business, implementation, and operations teams. It also evaluates security technologies, assesses risks, and monitors control effectiveness to support continuous improvement.

Nice To Haves

Preferred certifications include Certified Information Systems Security Professional (CISSP), Zscaler certifications, and relevant cloud networking, cloud security, Zero Trust, Secure Access Service Edge, or Security Service Edge certifications.

Responsibilities

Design and maintain security architecture blueprints integrating Zero Trust principles across identity, endpoints, networks, and applications for hybrid enterprise environments and cloud workloads.
Plan and design secure cloud VPN, site-to-site VPN, remote access, and Zero Trust connectivity solutions using Zscaler and comparable cloud security technologies.
Develop Zero Trust Network Access architectures that provide identity-aware, least-privileged, application-level access while reducing reliance on broad network-level trust.
Design and optimize Zscaler capabilities, including secure internet access, private application access, traffic inspection, policy enforcement, threat prevention, and data protection.
Lead connectivity planning and architecture for new platforms, ensuring secure integration with enterprise identity, network, cloud, application, and security services.
Define secure connectivity strategies for mergers and acquisitions, including discovery, network and application dependency assessment, interim connectivity, segmentation, access controls, migration, and transition to the target-state Zero Trust architecture.
Collaborate with cloud engineering and infrastructure teams to embed security guardrail policies and reference architectures that support Zero Trust security and controlled delivery of business initiatives.
Conduct security risk assessments focused on identity access flows and data paths; document findings and recommend actionable architectural improvements for hybrid and multicloud deployments.
Create high- and low-level designs, reference architectures, standards, patterns, implementation roadmaps, and reusable artifacts for cloud VPN, Zscaler, Zero Trust connectivity, and M&A integration.
Partner with product and business stakeholders to translate security requirements into practical architecture decisions that protect intellectual property and customer data while enabling frictionless digital experiences.
Evaluate Zscaler and similar SASE, SSE, cloud VPN, and Zero Trust technologies, recommending solutions based on security, scalability, resilience, interoperability, user experience, and cost.
Guide implementation and operations teams through reviews and walkthroughs to ensure deployed solutions adhere to security architecture principles and deliver expected protection outcomes.
Monitor the effectiveness of deployed security controls using metrics and qualitative feedback, then propose enhancements to policies, architecture components, and integration patterns.

Benefits

Medical coverage through UHC (PPO, HSA, and Surest options) or Kaiser (HMO option for California employees only)
Dental insurance through UHC
Vision insurance through Nationwide Vision by UHC
Flexible Spending Account for health and dependent care
Pre-tax commuter benefit for parking and transit (location-specific)
Continuing education and professional development through platforms such as Udemy and Coursera
Corporate wellness program
Employee Assistance Program
Wellness Days
401(k) plan
Basic and supplemental life insurance
Short-term and long-term disability insurance
Critical illness, critical hospital, and voluntary accident insurance
Tuition reimbursement, available six months after start date and capped
Paid Time Off, accrued and prorated, up to 120 hours annually
Paid holidays
Statutory leaves, paid time, and other ancillary benefits required under state and federal law