Zero Trust Architects, California

Job Summary

We are looking for a forward-thinking Zero Trust Architect to lead the design and implementation of Zero Trust security frameworks across enterprise environments. This role will be critical in driving the shift from traditional perimeter-based security to a modern, identity- and data-centric approach. The ideal candidate will have deep experience in security architecture, identity management, and network segmentation, with a strategic understanding of how to apply Zero Trust principles across users, devices, applications, and data.

Key Responsibilities

Lead the design and deployment of Zero Trust architecture (ZTA) across cloud, on-premise, and hybrid environments.

Assess current security posture and identify gaps in alignment with Zero Trust principles.

Define and document the Zero Trust strategy, roadmap, and architecture standards.

Collaborate with cross-functional teams (networking, identity, infrastructure, and applications) to integrate ZTA into enterprise systems.

Develop policies and controls to support micro-segmentation, identity governance, least privilege access, and continuous verification.

Select and implement appropriate security tools and technologies, including identity providers, access brokers, EDR/XDR, and network segmentation platforms.

Provide subject matter expertise on Zero Trust frameworks such as NIST SP 800-207, CISA Zero Trust Maturity Model, and DoD Zero Trust Strategy.

Advise executive leadership and stakeholders on ZTA risks, benefits, and adoption strategies.

Support audits, risk assessments, and compliance initiatives tied to Zero Trust architecture.

Qualifications

Education:

Bachelor s or Master s degree in Cybersecurity, Computer Science, Information Technology, or a related field.

Relevant certifications such as CISSP, CCSP, SABSA, TOGAF, or vendor-specific Zero Trust credentials are highly valued.

Experience:

5+ years of experience in security architecture or enterprise IT architecture.

Proven track record of designing and implementing Zero Trust or segmented security models.

Hands-on experience with identity and access management (IAM), multi-factor authentication (MFA), data protection, and endpoint security.

Skills & Competencies

Strong understanding of Zero Trust principles and how to apply them in real-world environments.

Proficiency in cloud platforms (e.g., AWS, Azure, Google Cloud) and cloud-native security controls.

Deep knowledge of enterprise networking, authentication protocols, and threat modeling.

Excellent communication and documentation skills, especially when engaging with non-technical stakeholders.

Strategic thinker with the ability to align security architecture to business goals.

Preferred Experience

Experience with Zero Trust technologies such as Zscaler, Palo Alto Networks, Okta, Microsoft Entra, or similar platforms.

Familiarity with DevSecOps, CI/CD pipelines, and secure software development practices.

Prior involvement in digital transformation, hybrid workforce, or cloud migration projects with a Zero Trust focus.