Zero Trust Security Architect

Job Description

Job Description

Company Overview:

Arctiq is a global, intelligence-driven technology services company delivering professional and managed services across Hybrid Cloud Infrastructure, Networking & Connected Experiences, Cybersecurity, Data & AI, Autonomous Operations & Intelligence, and Enterprise Service Management. We help organizations operate, secure, and modernize complex environments by unifying infrastructure, networking, data, security, automation, and observability under a single, integrated operating model. Our work focuses on helping customers reduce operational friction, improve resilience, and make better, faster decisions as their environments evolve. Arctiq builds on decades of industry expertise and a customer-centric ethos to deliver exceptional value to clients across diverse industries.

Position Overview:

We are seeking a Zero Trust Security Architect to lead the design, implementation, and modernization of enterprise secure access solutions. This role is responsible for helping drive our Zero Trust transformation by designing scalable, secure remote access architectures while supporting the migration from legacy VPN technologies to modern Security Service Edge (SSE) and Secure Access Service Edge (SASE) platforms.

The ideal candidate will possess deep expertise in enterprise network security and Zero Trust architectures with hands-on experience implementing leading SASE solutions. While experience with Zscaler ZPA and ZIA is highly preferred, we are also interested in candidates with strong implementation experience using Palo Alto Prisma Access, Cisco Secure Access, or comparable enterprise SASE platforms.

This position requires a combination of architecture, strategy, and hands-on engineering, partnering closely with infrastructure, cloud, networking, and security teams to deliver enterprise-scale secure access solutions.

This is a hybrid(Atlanta, GA), contract opportunity for a project Arctiq is delivering for a client.This position is based in Atlanta and requires working onsite three mandatory days per week (Tuesday–Thursday).

Responsibilities:

• Design and implement enterprise Zero Trust and SASE/SSE architectures.
  
• Lead migration initiatives from traditional VPN solutions to modern secure access platforms.
• Design secure remote access solutions supporting on-premises, hybrid, and cloud environments.
• Architect security policies for user access, application segmentation, traffic inspection, and secure connectivity.
• Serve as the technical lead for enterprise Zero Trust initiatives.
• Collaborate with networking, cloud, identity, and security teams throughout project delivery.
• Evaluate and recommend enterprise SASE technologies and security architectures.
• Integrate secure access platforms with identity providers including Microsoft Entra ID, Active Directory, LDAP, MFA, DNS, and PKI.
• Support integrations with AWS, Microsoft Azure, endpoint security platforms, SD-WAN, and enterprise networking technologies.
• Troubleshoot complex network connectivity and security issues across Windows, Linux, and macOS environments.
• Develop technical standards, architecture documentation, and implementation best practices.
• Provide technical mentorship and guidance to engineering teams.
• Identify automation opportunities using PowerShell, Python, and REST APIs.
  

Qualifications:

• 8+ years of experience in enterprise network security, Zero Trust, or security architecture.
  
• Experience designing and implementing enterprise SASE/SSE or Zero Trust Network Access (ZTNA) solutions.
• Strong understanding of SASE, SSE, and Zero Trust architecture principles.
• Experience with one or more of the following platforms:
  • Zscaler ZPA and ZIA (preferred)
  • Palo Alto Prisma Access
  • Cisco Secure Access
• Strong understanding of enterprise networking, including TCP/IP, routing, switching, DNS, and secure remote access.
• Experience with current-generation and next-generation firewall technologies and security policy management.
• Knowledge of:
  • Deep Packet Inspection (DPI)
  • Intrusion Detection and Prevention Systems (IDS/IPS)
  • Advanced Malware Protection technologies
• Experience integrating secure access platforms with:
  • Microsoft Entra ID
  • Active Directory
  • LDAP
  • MFA
  • DNS
  • PKI
• Experience supporting AWS and/or Microsoft Azure environments.
• Strong troubleshooting and packet analysis skills.
• Experience with enterprise-scale deployments supporting thousands of users.
• (Preferred) Deep experience with Zscaler ZPA and ZIA implementations.
• (Preferred) Zscaler, Palo Alto, Cisco, or other relevant security certifications.

Arctiq is an equal opportunity employer. If you need any accommodations or adjustments throughout the interview process and beyond, please let us know. We celebrate our inclusive work environment and welcome members of all backgrounds and perspectives to apply.

We thank you for your interest in joining the Arctiq team! While we welcome all applicants, only those who are selected for an interview will be contacted.