Sr. Cyber Security Architect

Sr Cyber Security Architect role in a global organization focusing on secure hybrid connectivity using Zscaler Internet Access and Zscaler Private Access for enterprise environments. The architect designs scalable security architectures drives secure adoption of cloud services aligns zero trust principles with business objectives and ensures robust protection of users and applications across a globally distributed workforce.

Responsibilities

• Design end to end cyber security architectures that integrate Zscaler Internet Access and Zscaler Private Access to protect users and applications across hybrid work environments while meeting enterprise scale performance and reliability needs.
• Develop comprehensive zero trust network access strategies that reduce attack surface and unauthorized lateral movement while enabling secure access to internal applications from any location on day shift schedules.
• Evaluate existing security controls and network topologies to identify gaps and optimization opportunities then recommend Zscaler driven solutions that strengthen threat prevention and data protection capabilities.
• Configure Zscaler Internet Access policies including web filtering cloud firewall security controls and advanced threat protection to enforce consistent security posture for all endpoints and user groups.
• Design application segmentation and access policies in Zscaler Private Access to provide granular secure connectivity to internal resources while maintaining strong authentication and authorization standards.
• Collaborate closely with network security and cloud platform teams to ensure Zscaler integrations with identity systems endpoint security tools and logging platforms operate smoothly and support business continuity.
• Create detailed architecture diagrams standards and reference implementations that document Zscaler deployment patterns configuration baselines and integration touchpoints for global enterprise use.
• Conduct security risk assessments and threat modeling focused on internet facing traffic and private application access then translate findings into actionable Zscaler policy changes and architectural improvements.
• Work with incident response teams to analyze security events logs and alerts generated through Zscaler platforms then refine detection rules and access policies to reduce recurrence and enhance resilience.
• Drive adoption of secure browsing and secure remote access practices by crafting clear technical guidelines and communicating how Zscaler controls help protect data privacy and business critical operations.
• Perform capacity planning and performance tuning for Zscaler services ensuring that traffic routing authentication flows and policy evaluation deliver consistent user experience without compromising security.
• Engage with project stakeholders to align security architecture decisions with compliance requirements regulatory obligations and organizational risk appetite maximizing positive impact on customers and society.
• Guide automation and infrastructure as code approaches for Zscaler configuration management to increase consistency reduce manual errors and accelerate secure onboarding of new sites and applications.

Qualifications

• Possess extensive hands on experience of twelve to fourteen years in enterprise cyber security architecture with strong delivery record in complex hybrid environments.
• Demonstrate deep expertise in designing deploying and tuning Zscaler Internet Access solutions including policy frameworks logging integration and threat protection capabilities.
• Exhibit advanced proficiency with Zscaler Private Access configuration such as application segments connector deployment and user access workflows in large organizations.
• Show solid understanding of zero trust security principles secure web gateways cloud access security concepts and integration with identity and access management platforms.
• Display practical knowledge of network security fundamentals including routing proxies DNS and firewall concepts ensuring that Zscaler designs align with broader infrastructure constraints.
• Bring experience working in hybrid work models supporting distributed teams with secure remote access while operating primarily in standard day shifts without frequent travel commitments.
• Maintain familiarity with security operations incident response and security monitoring practices to ensure architectures produce actionable visibility and support rapid containment.

À savoir avant de postuler

• Autorisation de travail: Cognizant ne prendra en considération que les candidats à ce poste qui sont légalement autorisés à travailler au Canada sans avoir besoin d'un parrainage de l'employeur, aujourd'hui ou à l'avenir.
• Mesures d’adaptation: Si vous avez un handicap qui nécessite des mesures d’adaptation raisonnable pour effectuer une recherche d’emploi ou poser une candidature, veuillez envoyer un courriel à [email protected] avec votre demande et vos coordonnées.
• L’IA dans notre processus de recrutement: Nous utilisons des outils d'intelligence artificielle (IA) pour trier et évaluer les candidatures efficacement. Notre équipe examine ensuite les candidatures et décide qui passe à l’étape suivante.
• Poste à pourvoir: Sauf indication contraire, ce poste est actuellement vacant et nous cherchons à le pourvoir.
• Exigences linguistiques: Nous demandons à tous les candidats de posséder une connaissance de base de l’anglais afin de faciliter les communications internes. Pour les postes au Québec, la capacité à communiquer efficacement en anglais est requise car vous fournirez des services à et collaborerez avec des parties prenantes anglophones situées hors de la province.
• Inclusion: Cognizant est un employeur souscrivant au principe de l’égalité d’accès à l’emploi. Votre candidature et votre dossier ne seront pas examinés en fonction de la race, de la couleur, du sexe, de la religion, des croyances, de l'orientation sexuelle, de l'identité de genre, de l'origine nationale, du handicap, des renseignements génétiques, de la grossesse, du statut d'ancien combattant ou de toute autre caractéristique protégée par les lois fédérales, provinciales ou locales.

À propos de Cognizant
Cognizant (NASDAQ: CTSH) est un AI Builder et une entreprise de services numériques (ESN) élaborant des solutions complètes d’IA maximisant les investissements pour des résultats concrets. Sa profonde expertise des métiers, des processus et des technologies lui permet d’intégrer dans les systèmes technologiques le contexte unique de chaque organisation de l’ingénierie à la production à l’échelle. Son objectif: améliorer l’efficacité des équipes, créer de la valeur et permettre aux grandes entreprises de rester performantes dans un monde qui évolue rapidement. Pour en savoir plus: cognizant.ai ou @cognizant.