Network Security Architect with Zscaler-Onsite

Position Title: Zscaler Zero Trust Branch Connector Implementation Architect

Role Summary: We are seeking an experienced Implementation Architect to lead the design, deployment, and integration of Zscaler Zero Trust Branch Connector solutions across enterprise branch networks. This role requires deep expertise in Zero Trust principles, secure connectivity, and network transformation strategies.

Key Responsibilities:

Solution Design & Architecture: Develop end-to-end architecture for Zscaler Branch Connector deployments in gateway and non-gateway modes. Define network segmentation, routing, and policy enforcement strategies aligned with Zero Trust principles.

Implementation & Integration:

• Lead installation, configuration, and testing of Zscaler Branch Connector hardware (ZT600, ZT800) and software (VMware, KVM)
• Integrate with Zscaler Internet Access (ZIA) and Zscaler Private Access (ZPA) for secure traffic forwarding.
• Lead technical implementation of Branch Connector hardware appliances and virtual machines
• Configure WAN failover, high availability, and policy-based routing.

Security & Compliance

• Ensure adherence to enterprise security standards and compliance frameworks.
• Implement certificate-based authentication and secure on boarding (ZTP)

Performance Optimization

• Fine-tune traffic flows, NAT, DHCP, and inter-VLAN firewalling for optimal performance
• Monitor and troubleshoot connectivity issues using Zscaler dashboards and analytics

Stakeholder Collaboration

• Work closely with network engineering, security teams, and business units to align deployment with organizational goals.
• Provide technical guidance and training to internal teams

Mandatory Skills & Experience:

• Strong knowledge of Zscaler Zero Trust Exchange, ZIA, ZPA, and Branch Connector architecture.
• Expertise in network design, SD-WAN, routing protocols, NAT, DHCP, and VLAN segmentation.
• Hands-on experience with Zero Touch Provisioning (ZTP) and TPM-based secure on boarding.
• Familiarity with firewall policies, CRL/OCSP, and certificate management.
• Proficiency in troubleshooting network and security issues in hybrid environments.

Preferred Skills:

• Experience with loT/OT device segmentation and policy enforcement.
• Knowledge of cloud security frameworks and integration with Azure/AWS/Google Cloud Platform
• Familiarity with automation tools for SOP fine-tuning and orchestration.

Experience:

• 10+ years in network/security architecture roles, with at least 4 years in Zero Trust or Zscaler deployments.