Security Architect – Zero Trust, Application Access

This is a fully remote position, open to applicants in Florida.

📋 Description

• Evaluate the internal-only application portfolio, determining the risk, data sensitivity, and access requirements for each application.

• Provide recommendations on whether applications should be publicly accessible or restricted to managed, company-issued devices.

• Develop and implement Zero Trust access strategies utilizing Zscaler (ZPA/ZIA), thereby eliminating the need for traditional VPNs.

• Establish, document, and disseminate security standards and reference architectures for application access, authentication, and authorization.

• Revise existing application security standards to align with the new access framework.

• Collaborate with application owners, infrastructure, networking, and IAM teams to secure approval for the access model and facilitate its implementation.

• Share findings, risks, and recommendations with IT and security leadership.

⛳️ Requirements

• Over 8 years of experience in information security, with significant expertise in security architecture or application security leadership.

• Practical experience in designing and implementing Zero Trust architecture.

• Strong preference for hands-on experience with Zscaler (ZPA and/or ZIA).

• Robust background in application security, including threat modeling, secure design reviews, and authentication/SSO (SAML, OAuth, OIDC).

• Experience in determining the appropriate exposure level for applications (public, private, or device-restricted) and securing each scenario.

• Knowledge of device posture assessments, conditional access, and IAM platforms (such as Okta, Azure AD/Entra ID, or similar).

• Demonstrated ability to produce clear security standards and patterns that engineering teams are likely to adopt.

• Excellent communication skills, with the ability to present to leadership and collaborate across teams.

• Preferred certifications include CISSP, CCSP, Zscaler certifications (ZCCA/ZCCP), or similar.

• Experience with WAF, reverse proxy, or API gateway security is preferred.

• Background in enterprise or automotive/financial services sectors is preferred.

🏝️ Benefits

• 3-month contract with the potential for long-term extension onto other projects.

• Remote work option.