Cybersecurity Consultant – Zero Trust Architect

About the role

The Zero Trust Architect will act as the technical authority for the customer’s enterprise Zero Trust, IAM, and identity‑security environment. You will design, implement and continuously improve Zero Trust architectures across identity, devices, applications, networks, cloud, data and security operations, collaborating with cross‑functional teams to deliver secure, scalable solutions.

Key responsibilities

• Design, maintain and evolve Zero Trust architecture, standards, reference models and adoption roadmaps.
• Assess security gaps across identity, devices, applications, network, cloud, data and workloads.
• Implement least‑privilege, continuous verification, identity‑first security, device trust and risk‑based access controls.
• Design and support IAM, SSO, MFA, ITDR, ZTNA, micro‑segmentation and identity‑based access controls.
• Integrate and troubleshoot enterprise security platforms such as Ping Identity, RadiantOne, Semperis DSP, Silverfort and Zimperium MTD.
• Support application integrations using SAML 2.0, OAuth 2.0 and OIDC.
• Integrate identity, endpoint, network, application, cloud and security telemetry for policy enforcement.
• Monitor and investigate identity threats, suspicious authentication, privileged access and AD security events.
• Perform security architecture reviews, Zero Trust maturity assessments, risk assessments and control‑gap analysis.
• Provide L2/L3 troubleshooting, incident investigation, remediation and vendor escalation.

Required profile

• Bachelor’s degree in Cybersecurity, Information Security, Computer Science, IT or a related field.
• 5+ years of experience in Zero Trust, IAM, identity security or infrastructure security.
• Strong knowledge of Zero Trust Architecture, IAM, authentication, authorization, MFA and ITDR.
• Hands‑on experience with at least two of the following platforms: Ping Identity, RadiantOne, Semperis DSP, Silverfort, Zimperium MTD, SIEM or EDR/XDR.
• Proven ability to work in enterprise production environments and complex security architectures.

Required skills

• Zero Trust Architecture
• Identity and Access Management (IAM)
• SAML 2.0, OAuth 2.0, OpenID Connect (OIDC)
• LDAP, Kerberos
• Active Directory, Microsoft Entra ID, hybrid identity
• ZTNA, micro‑segmentation, Network Access Control (NAC), device trust, conditional access
• Ping Identity, RadiantOne, Semperis DSP, Silverfort, Zimperium MTD
• SIEM, EDR/XDR platforms
• SSO, MFA, ITDR