Security Architect – Zero Trust / Application Access (Remote OR Hybrid)

Security Architect – Zero Trust / Application Access

Location: Hybrid is great but REMOTE is also fine (client is located in S. Florida, EST time zone)

Type: Contract – 3 months + possible long term extension onto other projects

Start Date: 2 weeks

About the Role

Our client is building a secure-access strategy for internal business applications that have never been exposed outside the corporate network, since there is no traditional VPN. They need a hands-on Security Architect or Application Security Lead to review those applications, decide how each one should be accessed, and set the security standards and patterns that govern access from here forward. Zscaler will be the core access platform.

What You'll Do

Review the internal-only application portfolio and assess each app's risk, data sensitivity, and access requirements

Recommend for each application whether it can be exposed publicly or should stay limited to managed, company-issued devices

Design and implement Zero Trust access patterns using Zscaler (ZPA/ZIA), replacing the need for a traditional VPN

Create, document, and roll out security standards and reference patterns for application access, authentication, and authorization

Update existing application security standards so they reflect the new access model

Partner with application owners, infrastructure, networking, and IAM teams to get approval for the access model and put it in place

Present findings, risks, and recommendations to IT and security leadership

What You Bring

8+ years in information security, with significant time in security architecture or application security leadership

Hands-on experience designing and implementing Zero Trust architecture (this is critical)

Hands-on Zscaler experience (ZPA and/or ZIA) strongly preferred

Strong application security background, including threat modeling, secure design reviews, and authentication/SSO (SAML, OAuth, OIDC)

Experience deciding how applications should be exposed (public, private, or device-restricted) and securing each scenario

Familiarity with device posture checks, conditional access, and IAM platforms (Okta, Azure AD/Entra ID, or similar)

Proven ability to write clear security standards and patterns that engineering teams actually adopt

Strong communication skills, with comfort presenting to leadership and working across teams

Nice to Have

CISSP, CCSP, Zscaler certifications (ZCCA/ZCCP), or similar

Experience with WAF, reverse proxy, or API gateway security

Background in enterprise or automotive/financial services environments

About INSPYR Solutions

Technology is our focus and quality is our commitment. As a national expert in delivering flexible technology and talent solutions, we strategically align industry and technical expertise with our clients' business objectives and cultural needs. Our solutions are tailored to each client and include a wide variety of professional services, project, and talent solutions. By always striving for excellence and focusing on the human aspect of our business, we work seamlessly with our talent and clients to match the right solutions to the right opportunities. Learn more about us at inspyrsolutions.com.

INSPYR Solutions provides Equal Employment Opportunities (EEO) to all employees and applicants for employment without regard to race, color, religion, sex, national origin, age, disability, genetics, or any other protected status. INSPYR Solutions complies with all applicable laws governing nondiscrimination in employment in every location in which the company has facilities. Applicants requiring reasonable accommodation during the application or interview process should contact HR@inspyrsolutions.com for assistance.

Information collected and processed through your application with INSPYR Solutions (including any job applications you choose to submit) is subject to INSPYR Solutions' Privacy Policy and INSPYR Solutions' AI and Automated Employment Decision Tool Policy: https://www.inspyrsolutions.com/policies/ . By submitting an application, you are consenting to being contacted by INSPYR Solutions through phone, email, or text.

26-160311