Cybersecurity Consultant (Zero Trust Architect)

Cybersecurity Consultant (Zero Trust Architect) – Drive Enterprise-Scale Zero Trust Transformation

Join our elite team as a **Cybersecurity Consultant (Zero Trust Architect)** and become the strategic technical leader responsible for designing, implementing, and optimizing cutting-edge Zero Trust architectures. In this high-impact role, you will collaborate with cross-functional teams to architect and deploy identity-centric security frameworks that safeguard modern enterprises against evolving cyber threats. Your expertise will shape secure, scalable, and resilient security postures across identity, devices, applications, networks, cloud environments, and data—ensuring alignment with both business objectives and stringent cybersecurity requirements.

As a Zero Trust Architect, you will leverage your deep technical acumen to bridge the gap between security innovation and operational excellence. Your work will directly influence how organizations mitigate risks, enforce least-privilege access, and enforce continuous verification—all while driving adoption of industry-leading security standards. This is more than a job; it’s an opportunity to redefine enterprise security through a proactive, identity-first approach.

Key Responsibilities

Your role will encompass a broad spectrum of strategic and tactical responsibilities, ensuring Zero Trust principles are embedded into every layer of the security architecture:

• Architect and Optimize Zero Trust Frameworks: Design, refine, and maintain comprehensive Zero Trust architectures, security standards, and adoption roadmaps tailored to enterprise-scale environments. Align these frameworks with global cybersecurity best practices while addressing evolving threat landscapes.
• Conduct Security Gap Assessments: Perform in-depth evaluations across identity, devices, applications, networks, cloud platforms, and data workloads to identify vulnerabilities and misconfigurations. Provide actionable insights to mitigate risks and enhance security resilience.
• Implement Core Zero Trust Controls: Deploy and enforce critical security controls such as least-privilege access, continuous authentication, identity-first security, device trust assessments, and risk-based access policies. Ensure seamless integration with existing infrastructure while maintaining operational efficiency.
• Lead Identity and Access Management (IAM) Solutions: Specify, configure, and troubleshoot advanced IAM technologies, including Single Sign-On (SSO), Multi-Factor Authentication (MFA), Identity Threat Detection and Response (ITDR), Zero Trust Network Access (ZTNA), and micro-segmentation. Support integrations with modern authentication protocols like SAML 2.0, OAuth 2.0, and OpenID Connect (OIDC).
• Leverage Enterprise Security Platforms: Gain hands-on experience with leading security solutions such as Ping Identity, RadiantOne, Semperis DSP, Silverfort, and Zimperium MTD. Configure, optimize, and troubleshoot these platforms to ensure they align with Zero Trust principles and operational workflows.
• Unify Security Telemetry and Analytics: Integrate identity, endpoint, network, application, cloud, and security telemetry to enable real-time policy enforcement and threat detection. Collaborate with SIEM, SOAR, EDR/XDR, UEBA, MDM/UEM, and NAC platforms to create a cohesive security monitoring ecosystem.
• Investigate and Remediate Security Incidents: Monitor and investigate identity-based threats, suspicious authentication attempts, privileged access abuses, Active Directory security events, and indicators of compromise (IoCs). Conduct root-cause analysis, develop remediation strategies, and escalate issues to vendors as needed.
• Perform Security Architecture Reviews: Conduct Zero Trust maturity assessments, risk evaluations, and control-gap analyses to ensure compliance with frameworks such as NIST SP 800-207. Provide strategic recommendations to enhance security posture and drive continuous improvement.
• Troubleshoot and Document Technical Solutions: Provide Level 2 and Level 3 technical support, including troubleshooting complex security issues, documenting high-level and low-level designs (HLD/LLD), and creating architecture diagrams. Develop comprehensive technical documentation and implementation roadmaps for stakeholder alignment.
• Foster Knowledge Transfer and Collaboration: Mentor internal teams and external stakeholders on Zero Trust best practices, security controls, and emerging threats. Facilitate knowledge-sharing sessions and ensure seamless adoption of security initiatives across the organization.

Qualifications and Skills

To excel in this role, you must possess a blend of technical expertise, strategic thinking, and a passion for cybersecurity innovation. The ideal candidate will meet the following criteria:

• Education: Bachelor’s degree in Cybersecurity, Information Security, Computer Science, IT, or a related discipline. Advanced certifications or specialized training are a significant advantage.
• Technical Proficiency: Five or more years of hands-on experience in Zero Trust architecture, Identity and Access Management (IAM), cybersecurity, identity security, or infrastructure security. Deep knowledge of Zero Trust principles, including identity-first security, least-privilege access, continuous verification, and device trust.
• Authentication and Authorization Expertise: Strong working knowledge of SAML 2.0, OAuth 2.0, OpenID Connect (OIDC), LDAP, and Kerberos protocols. Familiarity with modern identity platforms such as Active Directory, Microsoft Entra ID (formerly Azure AD), and hybrid identity architectures.
• Zero Trust and Network Security: Comprehensive understanding of Zero Trust Network Access (ZTNA), micro-segmentation, Network Access Control (NAC), conditional access policies, and risk-based authentication mechanisms.
• Platform Experience: Hands-on experience with at least two to three of the following platforms: Ping Identity, RadiantOne, Semperis DSP, Silverfort, Zimperium MTD, ZTNA/SASE/SSE solutions, SIEM systems, or EDR/XDR platforms. Proficiency in troubleshooting, log analysis, and security event investigation is essential.
• Operational Excellence: Extensive experience working in enterprise production environments, managing complex security architectures, and ensuring high availability and performance.
• Stakeholder and Communication Skills: Exceptional ability to communicate technical concepts to both technical and non-technical stakeholders. Strong documentation skills and a commitment to knowledge transfer and continuous learning.
• Certifications (Preferred): Industry-recognized certifications such as CISSP, CISM, GIAC, Microsoft Certified: Security, Zero Trust, IAM, or vendor-specific certifications are highly valued and will strengthen your candidacy.

This role is ideal for cybersecurity professionals who are not only technically proficient but also driven by a commitment to advancing enterprise security through innovative solutions. If you are passionate about shaping the future of Zero Trust and want to make a tangible impact on global cybersecurity, we invite you to be part of our mission.