Principal Consultant, Zscaler ZIA/ZPA and Zero Trust Architecture

We are seeking a Principal Consultant, Zscaler ZIA/ZPA and Zero Trust Architecture to lead the design and implementation of modern Zero Trust architectures, with a focus on Zscaler (ZIA/ZPA) and secure access transformation. This role is ideal for a hands-on technical leader who can translate strategy into scalable, real-world solutions—driving DIA-first architectures, eliminating legacy network assumptions, and delivering identity-driven access for enterprise clients in regulated environments.

Responsibilities

Key Responsibilities

Architecture & Solution Design
• Design and deliver end-to-end Zero Trust architectures leveraging ZTNA (ZPA), ZIA, and SSE/SASE frameworks
• Architect DIA-first strategies that eliminate centralized egress and legacy network dependencies
• Ensure all access decisions are based on identity, device posture, and context, not network location
• Lead the transition away from VPN and MPLS to modern secure access models

Hands-On Implementation & Build
• Lead full lifecycle Zscaler implementations across enterprise environments
• Configure and optimize ZIA traffic forwarding and ZPA segmentation
• Design, implement, and continuously refine ZIA policies including URL filtering, SSL inspection, CASB, and DLP
• Troubleshoot complex issues across TLS, DNS, proxy, and application layers
• Optimize for performance, security, and operational scalability

SD-WAN & Network Integration
• Integrate Zscaler with leading SD-WAN platforms
• Implement DIA-based traffic steering using GRE/IPsec tunnels
• Eliminate assumptions of trusted networks and legacy routing models

Technical Leadership
• Serve as a hands-on technical leader across design and delivery
• Establish reusable architecture patterns, standards, and best practices
• Mentor engineers and elevate client technical capabilities

Client Engagement
• Act as a trusted advisor on Zero Trust transformation and secure access strategy
• Lead technical discovery, solution validation, and stakeholder alignment
• Clearly communicate architectural shifts and business impact

Compliance & Risk Alignment
• Align solutions with frameworks such as NIST, NERC-CIP, and ISO
• Ensure designs are audit-ready, secure, and compliant with regulatory requirements

Qualifications
• Work Authorization: Must be legally authorized to work in the United States without employer sponsorship
• Location Requirement: Must be a resident of the continental United States
• 8–12+ years of experience in network security, Zero Trust, or secure access architecture roles
• Deep expertise in Zscaler (ZIA & ZPA), including policy design, optimization, and troubleshooting
• Strong experience designing and implementing Zero Trust Network Access (ZTNA) and SSE/SASE architectures
• Proven experience building DIA-first architectures and eliminating VPN/MPLS-based designs
• Strong knowledge of networking fundamentals including DNS, TLS, proxy architectures, and traffic flow design
• Experience integrating Zscaler with SD-WAN platforms and implementing GRE/IPsec tunnels
• Solid understanding of identity providers such as Entra ID (Azure AD) or Okta, including conditional access and device posture
• Experience with security policy frameworks including URL filtering, SSL inspection, CASB, and DLP
• Familiarity with automation using APIs, Terraform, or similar tooling is a plus
• Experience working in regulated industries (e.g., energy, utilities, finance, healthcare) preferred
• Strong troubleshooting skills across network and application layers
• Excellent communication skills with experience engaging both technical teams and business stakeholders
• Demonstrated ability to operate as a hands-on builder across both architecture and implementation

Nice to Haves
• Experience with identity providers such as Entra ID (Azure AD) or Okta in Zero Trust architectures
• Familiarity with endpoint management and device posture enforcement (e.g., Intune, CrowdStrike)
• Experience with automation using Terraform, APIs, or infrastructure-as-code for Zscaler deployments
• Exposure to enterprise compliance frameworks such as NIST, NERC-CIP, or ISO, and collaboration with SOC/SIEM teams
• Knowledge of SIEM platforms (e.g., QRadar, Splunk) and integrating Zscaler logs for visibility and response
• Experience integrating third-party security tools into SSE/SASE ecosystems
• Familiarity with cloud security architectures across Azure, AWS, or GCP
• Exposure to performance monitoring and user experience optimization within secure access environments
• Experience supporting large-scale enterprise transformations from legacy network models to Zero Trust

Compensation

W2 Employment: $150-300k annually with full benefits, including:

401(k) with employer matching 6%

Health, dental, and vision insurance

Paid time off

Life insurance

At DevAltus, we’re a boutique consultancy focused on modern cybersecurity, Zero Trust architecture, and secure access transformation. As a Principal Consultant – Zero Trust, ZTNA & Secure Access (Zscaler), you will lead the design and delivery of identity-driven, cloud-enforced architectures that replace legacy network models and enable secure, scalable access for enterprise clients.

We’re looking for builders—leaders who thrive in both architecture and hands-on implementation, who can navigate complexity, challenge outdated assumptions, and deliver real-world outcomes. If you’re passionate about Zero Trust, Zscaler, and driving meaningful transformation, we’d love to connect.

Please ensure your resume highlights relevant experience with Zscaler (ZIA/ZPA), Zero Trust architecture, DIA-first design, and secure access implementations.