Principal Consultant, Zscaler ZIA/ZPA and Zero Trust Architecture
We are seeking a Principal Consultant, Zscaler ZIA/ZPA and Zero Trust Architecture to lead the design and implementation of modern Zero Trust architectures, with a focus on Zscaler (ZIA/ZPA) and secure access transformation. This role is ideal for a hands-on technical leader who can translate strategy into scalable, real-world solutions—driving DIA-first architectures, eliminating legacy network assumptions, and delivering identity-driven access for enterprise clients in regulated environments.
\n
Responsibilities
Key Responsibilities
Architecture & Solution Design
Design and deliver end-to-end Zero Trust architectures leveraging ZTNA (ZPA), ZIA, and SSE/SASE frameworks
Architect DIA-first strategies that eliminate centralized egress and legacy network dependencies
Ensure all access decisions are based on identity, device posture, and context, not network location
Lead the transition away from VPN and MPLS to modern secure access models
Hands-On Implementation & Build
Lead full lifecycle Zscaler implementations across enterprise environments
Configure and optimize ZIA traffic forwarding and ZPA segmentation
Design, implement, and continuously refine ZIA policies including URL filtering, SSL inspection, CASB, and DLP
Troubleshoot complex issues across TLS, DNS, proxy, and application layers
Optimize for performance, security, and operational scalability
SD-WAN & Network Integration
Integrate Zscaler with leading SD-WAN platforms
Implement DIA-based traffic steering using GRE/IPsec tunnels
Eliminate assumptions of trusted networks and legacy routing models
Technical Leadership
Serve as a hands-on technical leader across design and delivery
Establish reusable architecture patterns, standards, and best practices
Mentor engineers and elevate client technical capabilities
Client Engagement
Act as a trusted advisor on Zero Trust transformation and secure access strategy
Lead technical discovery, solution validation, and stakeholder alignment
Clearly communicate architectural shifts and business impact
Compliance & Risk Alignment
Align solutions with frameworks such as NIST, NERC-CIP, and ISO
Ensure designs are audit-ready, secure, and compliant with regulatory requirements
Qualifications
Work Authorization: Must be legally authorized to work in the United States without employer sponsorship
Location Requirement: Must be a resident of the continental United States
8–12+ years of experience in network security, Zero Trust, or secure access architecture roles
Deep expertise in Zscaler (ZIA & ZPA), including policy design, optimization, and troubleshooting
Strong experience designing and implementing Zero Trust Network Access (ZTNA) and SSE/SASE architectures
Proven experience building DIA-first architectures and eliminating VPN/MPLS-based designs
Strong knowledge of networking fundamentals including DNS, TLS, proxy architectures, and traffic flow design
Experience integrating Zscaler with SD-WAN platforms and implementing GRE/IPsec tunnels
Solid understanding of identity providers such as Entra ID (Azure AD) or Okta, including conditional access and device posture
Experience with security policy frameworks including URL filtering, SSL inspection, CASB, and DLP
Familiarity with automation using APIs, Terraform, or similar tooling is a plus
Experience working in regulated industries (e.g., energy, utilities, finance, healthcare) preferred
Strong troubleshooting skills across network and application layers
Excellent communication skills with experience engaging both technical teams and business stakeholders
Demonstrated ability to operate as a hands-on builder across both architecture and implementation
Nice to Haves
Experience with identity providers such as Entra ID (Azure AD) or Okta in Zero Trust architectures
Familiarity with endpoint management and device posture enforcement (e.g., Intune, CrowdStrike)
Experience with automation using Terraform, APIs, or infrastructure-as-code for Zscaler deployments
Exposure to enterprise compliance frameworks such as NIST, NERC-CIP, or ISO, and collaboration with SOC/SIEM teams
Knowledge of SIEM platforms (e.g., QRadar, Splunk) and integrating Zscaler logs for visibility and response
Experience integrating third-party security tools into SSE/SASE ecosystems
Familiarity with cloud security architectures across Azure, AWS, or GCP
Exposure to performance monitoring and user experience optimization within secure access environments
Experience supporting large-scale enterprise transformations from legacy network models to Zero Trust
\n$150 - $300 a year
Compensation
W2 Employment: $150-300k annually with full benefits, including:
401(k) with employer matching 6%
Health, dental, and vision insurance
Paid time off
Life insurance
\nAt DevAltus, we’re a boutique consultancy focused on modern cybersecurity, Zero Trust architecture, and secure access transformation. As a Principal Consultant – Zero Trust, ZTNA & Secure Access (Zscaler), you will lead the design and delivery of identity-driven, cloud-enforced architectures that replace legacy network models and enable secure, scalable access for enterprise clients.
We’re looking for builders—leaders who thrive in both architecture and hands-on implementation, who can navigate complexity, challenge outdated assumptions, and deliver real-world outcomes. If you’re passionate about Zero Trust, Zscaler, and driving meaningful transformation, we’d love to connect.
📌 Please ensure your resume highlights relevant experience with Zscaler (ZIA/ZPA), Zero Trust architecture, DIA-first design, and secure access implementations.
Apply To This Job
\n
Responsibilities
Key Responsibilities
Architecture & Solution Design
Design and deliver end-to-end Zero Trust architectures leveraging ZTNA (ZPA), ZIA, and SSE/SASE frameworks
Architect DIA-first strategies that eliminate centralized egress and legacy network dependencies
Ensure all access decisions are based on identity, device posture, and context, not network location
Lead the transition away from VPN and MPLS to modern secure access models
Hands-On Implementation & Build
Lead full lifecycle Zscaler implementations across enterprise environments
Configure and optimize ZIA traffic forwarding and ZPA segmentation
Design, implement, and continuously refine ZIA policies including URL filtering, SSL inspection, CASB, and DLP
Troubleshoot complex issues across TLS, DNS, proxy, and application layers
Optimize for performance, security, and operational scalability
SD-WAN & Network Integration
Integrate Zscaler with leading SD-WAN platforms
Implement DIA-based traffic steering using GRE/IPsec tunnels
Eliminate assumptions of trusted networks and legacy routing models
Technical Leadership
Serve as a hands-on technical leader across design and delivery
Establish reusable architecture patterns, standards, and best practices
Mentor engineers and elevate client technical capabilities
Client Engagement
Act as a trusted advisor on Zero Trust transformation and secure access strategy
Lead technical discovery, solution validation, and stakeholder alignment
Clearly communicate architectural shifts and business impact
Compliance & Risk Alignment
Align solutions with frameworks such as NIST, NERC-CIP, and ISO
Ensure designs are audit-ready, secure, and compliant with regulatory requirements
Qualifications
Work Authorization: Must be legally authorized to work in the United States without employer sponsorship
Location Requirement: Must be a resident of the continental United States
8–12+ years of experience in network security, Zero Trust, or secure access architecture roles
Deep expertise in Zscaler (ZIA & ZPA), including policy design, optimization, and troubleshooting
Strong experience designing and implementing Zero Trust Network Access (ZTNA) and SSE/SASE architectures
Proven experience building DIA-first architectures and eliminating VPN/MPLS-based designs
Strong knowledge of networking fundamentals including DNS, TLS, proxy architectures, and traffic flow design
Experience integrating Zscaler with SD-WAN platforms and implementing GRE/IPsec tunnels
Solid understanding of identity providers such as Entra ID (Azure AD) or Okta, including conditional access and device posture
Experience with security policy frameworks including URL filtering, SSL inspection, CASB, and DLP
Familiarity with automation using APIs, Terraform, or similar tooling is a plus
Experience working in regulated industries (e.g., energy, utilities, finance, healthcare) preferred
Strong troubleshooting skills across network and application layers
Excellent communication skills with experience engaging both technical teams and business stakeholders
Demonstrated ability to operate as a hands-on builder across both architecture and implementation
Nice to Haves
Experience with identity providers such as Entra ID (Azure AD) or Okta in Zero Trust architectures
Familiarity with endpoint management and device posture enforcement (e.g., Intune, CrowdStrike)
Experience with automation using Terraform, APIs, or infrastructure-as-code for Zscaler deployments
Exposure to enterprise compliance frameworks such as NIST, NERC-CIP, or ISO, and collaboration with SOC/SIEM teams
Knowledge of SIEM platforms (e.g., QRadar, Splunk) and integrating Zscaler logs for visibility and response
Experience integrating third-party security tools into SSE/SASE ecosystems
Familiarity with cloud security architectures across Azure, AWS, or GCP
Exposure to performance monitoring and user experience optimization within secure access environments
Experience supporting large-scale enterprise transformations from legacy network models to Zero Trust
\n$150 - $300 a year
Compensation
W2 Employment: $150-300k annually with full benefits, including:
401(k) with employer matching 6%
Health, dental, and vision insurance
Paid time off
Life insurance
\nAt DevAltus, we’re a boutique consultancy focused on modern cybersecurity, Zero Trust architecture, and secure access transformation. As a Principal Consultant – Zero Trust, ZTNA & Secure Access (Zscaler), you will lead the design and delivery of identity-driven, cloud-enforced architectures that replace legacy network models and enable secure, scalable access for enterprise clients.
We’re looking for builders—leaders who thrive in both architecture and hands-on implementation, who can navigate complexity, challenge outdated assumptions, and deliver real-world outcomes. If you’re passionate about Zero Trust, Zscaler, and driving meaningful transformation, we’d love to connect.
📌 Please ensure your resume highlights relevant experience with Zscaler (ZIA/ZPA), Zero Trust architecture, DIA-first design, and secure access implementations.
Apply To This Job