Security Architect

Job Summary

Experienced Security Architect with 10-15+ years of cybersecurity and network security experience, including 5+ years in SASE/SSE, Zero Trust, cloud security, and enterprise security transformations. Responsible for leading the architecture, design, and technical governance of SSE solutions, ensuring alignment with business, security, compliance, and operational requirements. Provides technical leadership throughout design, implementation, migration, and transition phases.

Roles & Responsibilities

• Lead architecture, design, and deployment strategy for SSE platforms, including SWG, ZTNA, Secure Browser, DEM, URL Filtering, and Threat Prevention.
• Conduct discovery workshops and assess current-state network, security, identity, and application architecture.
• Develop High-Level Design (HLD) and Low-Level Design (LLD) documents.
• Define architecture standards, security controls, and implementation best practices.
• Design traffic steering, service connection, routing, authentication, and policy frameworks.
• Provide technical leadership during implementation, migration, testing, and rollout activities.
• Review and validate security policies, user access models, segmentation strategies, and compliance requirements.
• Lead technical risk assessments and mitigation planning.
• Support UAT planning, design validation, and production readiness reviews.
• Provide governance and oversight during cutover and hypercare phases.
• Drive knowledge transfer and transition to operational support teams.

Educational Qualification

• Bachelor’s degree in computer science, Information Technology, Engineering, Cybersecurity, or related field.
• Master's degree preferred

Skills & Certifications

Technical Skills

• SSE/SASE Platforms (Palo Alto Prisma Access, Zscaler, Netskope, Cisco SSE or equivalent)
• Secure Web Gateway (SWG)
• Zero Trust Network Access (ZTNA)
• Identity & Access Management (SSO, MFA, Conditional Access)
• Cloud Security (AWS, Azure, Google Cloud Platform)
• Network Security and Routing Concepts
• VPN Technologies and Traffic Steering
• SIEM and Security Integrations
• Threat Prevention, URL Filtering, SSL Inspection
• Security Architecture and Enterprise Design

Preferred Certifications

• CISSP
• CCSP
• PCNSE / Palo Alto Prisma Access
• Zscaler Certified Architect
• CCIE Security / CCNP Security
• Azure Security Engineer or equivalent