Principal Zero Trust Security Architect

s a flexible/hybrid model of 3 days onsite and 2 days remote (onsite Tuesdays, Wednesdays and a third day unique to each team or employee).

The Impact you will have in this role:
We are seeking an experienced Zero Trust Security Architect to lead the design, engineering, and implementation of ZScaler Zero Trust Exchange. The ideal candidate will have the deep understanding of the Zero Trust Security Model pillars that includes but not limited to Identity, Device, Network, Application Workload and Data. This role provides great opportunity to create positive Impact in the Zero Trust Journey for DTCC.
Your Primary Responsibilities:

• Lead the vision and technical design in all aspects of the Zscaler Zero Trust Exchange implementation.

• Lead the Zscaler Internet Access engineering, deployment, and migration from Legacy internet access solution to ZIA.

• Design and Implementation Zscaler Secure Internet and SAAS access features such as DLP, CASB, SSPM, Advanced Treat Projection, Browser Isolation, Sandboxing, Secure Gateway Risk 360, DSPM, SIPA, NSS, etc,

• Provide Technical leadership and guidance to the program in all aspects of Zscaler Zero Trust Exchange in all areas not limited to ZIA, ZPA, ZDX.

• Assess security gaps in current architecture and process, have awareness of market trends and advancing capabilities in alignment to Zero Trust program goals.

• Lead team of Cybersecurity engineers and provide technical guidance in the areas of Network Security (WAF, DOS, DDOS etc) and End Point Engineering tools such as CrowdStrike and Secure Web Gateway.

**NOTE: The Primary Responsibilities of this role are not limited to the details above. **
Qualifications:

• Bachelor's degree and/or equivalent experience
• Minimum 10 years of Cybersecurity related experience

Talents Needed for Success:

• Minimum of 10 years of related experience in the field of Cybersecurity with expertise in domains like Network Security, Data Protection, Endpoint Security.

• Hands on experience in implementation for Zscaler ZIA, ZPA, ZDX.

• Experience and deep understanding of Cyber Security controls for SaaS Solutions, Azure AD, Azure, AWS

• Experience in managing Data Protection Technologies: Endpoint & Web DLP, CASB

• Network Security: Secure Web Gateways, Secure Access Secure Edge (SASE), Firewalls, IDS/IPS technologies

• Endpoint Security: Endpoint Detection and Response, Endpoint Protection, NGAV, DLP and Firewall technologies

• Strong communication and interpersonal skills, including the ability to build relationships with key stakeholders.

• Strong critical thinking and problem-solving skills to resolve problems effectively and creatively while maintaining a high level of flexibility, professionalism, and integrity.

• Industry security certifications such as CISSP or other cybersecurity domain coverage is preferred.

The salary range is indicative for roles at the same level within DTCC across all US locations. Actual salary is determined based on the role, location, individual experience, skills, and other considerations. We are an equal opportunity employer and value diversity at our company. We do not discriminate on the basis of race, religion, color, national origin, sex, gender, gender expression, sexual orientation, age, marital status, veteran status, or disability status. We will ensure that individuals with disabilities are provided reasonable accommodation to participate in the job application or interview process, to perform essential job functions, and to receive other benefits and privileges of employment. Please contact us to request accommodation.