Cloud Security Architect with Zscaler(Hybrid)

Qualifications

Proficient with Identity Access solutions such as Microsoft Entra ID

Synap in place with a reasonable set of control policies

IAC and automation as much as possible

beef up IDAM which is azure Entra

build onboarding and offboarding work flows to automate PIM- have been using AWS identiy access so doesnt have a ton of features for governance and workflows and entitlement management

but also a sandbox area so they need to understand that they need to be flexible and also secure so can't come in with everything need

Good at implementing security and having Zscaler

advanced Azure experience

Zero trust, cloud access security brokers

Does not want to see hardcore networking- needs to see more IAC= terraform,

This will be a very hands on role so the ideal candidate needs to be comfortable with that and not just doing design/roadmap work

Requires hands-on experience in Network Design, Network Engineering, Network Operational Support, and cloud engineering experience of Medium to Large enterprise network environments

Experience implementing the ZScaler CASB solution in an enterprise

Experience with Zscaler or related Data Loss Prevention (DLP) practices and policies

Experience with managing user access controls in AZURE cloud environments

Experience with ServiceNow, Jira, VMware vCenter, cloud computing concepts

Experience with cloud reporting with preparation for both internal and executive stakeholders

Experience migrating from legacy on-prem networking to the cloud networking Experience with traditional on-premises proxies

Experience with cloud-based proxy concepts

Experience deploying and managing virtual servers on premise and in the cloud

Experience with concepts and operations of cloud-based on physical load balancers

Experience with implementing and exporting audit trails Experience with cloud-based monitoring solutions

Notes:

- Cloud Security Posture Management (CSPM)
- Proficient with Identity Access solutions such as Microsoft Entra ID
- Security End points experience
- Zscaler (preferred) /Cybersecurity and Zero Trust

Top three absolute requirements?
- Synap in place with a reasonable set of control policies
- IAC and automation as much as possible
- beef up IDAM which is azure Entra
- build onboarding and offboarding work flows to automate PIM- have been using AWS identiy access so doesnt have a ton of features for governance and workflows and entitlement management
- but also a sandbox area so they need to understand that they need to be flexible and also secure so can't come in with everything need