Cyber - Data Protection Zscaler Architect - Senior - Consulting

Location: Anywhere in Country   At EY, we’re all in to shape your future with confidence.    We’ll help you succeed in a globally connected powerhouse of diverse teams and take your career wherever you want it to go.  Join EY and help to build a better working world.

The opportunity In a rapidly changing technology, data, privacy, and cybersecurity landscape, clients across industries look to us for trusted guidance on designing secure, resilient, and well-governed zero trust environments. As a Senior within the Data Protection and Privacy team, you will serve as a developing Zscaler Architect with experience across secure access service edge, zero trust network access, secure internet access, digital experience, and data protection. Zscaler experience is required, and the role is intended for a senior consulting professional who can lead defined solution areas while supporting broader architecture across identity, endpoint, network, cloud, security operations, data governance, and relevant third-party technologies.   The Senior is expected to lead defined workstreams, facilitate client discussions, develop solution designs, guide implementation activities, and produce high-quality architecture and delivery artifacts while working under the direction of a Manager or senior architect for complex or enterprise-wide decisions. You will help clients translate business, security, privacy, legal, regulatory, and technology requirements into practical zero trust designs, roadmaps, governance approaches, and implementation plans.   Your key responsibilities As a Senior on the Data Protection and Privacy team, your key responsibilities would include:

Lead defined Zscaler security and data protection workstreams, including discovery, requirements gathering, design, configuration guidance, testing, deployment planning, and operational transition. Design and support solutions across the Zscaler Zero Trust Exchange, with particular emphasis on Zscaler Internet Access, Zscaler Private Access, Zscaler Digital Experience, Zscaler Client Connector, and related data protection capabilities. Develop secure internet and SaaS access designs covering secure web gateway, cloud access security broker, cloud firewall, sandboxing, SSL inspection, browser isolation, threat protection, and policy enforcement patterns. Develop zero trust private application access designs covering application segmentation, access policies, App Connector placement, third-party access, privileged remote access, and migration from legacy VPN approaches. Incorporate data protection requirements into Zscaler designs, including cloud DLP, SaaS security, inline inspection, policy configuration, incident workflows, and integration with enterprise data protection controls. Support zero trust, secure access, data protection, cloud, branch, workload, identity, endpoint, and digital experience assessments, roadmaps, and architecture activities. Facilitate client workshops and stakeholder interviews across security, privacy, legal, compliance, network, infrastructure, cloud, identity, endpoint, application, data governance, and security operations teams. Translate requirements into architecture diagrams, traffic-flow designs, policy models, integration requirements, user stories, migration plans, test scenarios, operational procedures, and measurable outcomes. Create clear reference patterns, configuration standards, design decisions, executive presentations, and technical implementation guidance. Support integrations with identity providers, endpoint and device management platforms, SIEM and SOAR technologies, IT service management tools, network infrastructure, cloud platforms, data security tools, and other third-party controls. Track workstream scope, activities, risks, issues, dependencies, decisions, and status, escalating material concerns to engagement leadership when appropriate. Provide technical direction to junior