CronJobs

security jobs

Senior Zero Trust Architect / Engineer

Legendcareers · Bridgewater, New Jersey, United States; Somerset, New Jersey, United States

hybridsenior$110,706–$110,706Posted Sep 18, 2026Zscaler ZIAZscaler ZPAZscaler ZDXMicrosoft Entra IDMicrosoft Active DirectoryMicrosoft DefenderMicrosoft PurviewMicrosoft Intune

Apply on the employer site

About this role

**Legend Biotech — Senior Zero Trust Architect / Engineer** **Location:** Bridgewater, NJ or Somerset, NJ **Team:** Information Technology --- ## Role Overview Design, implement, and govern the organization’s **Zero Trust security strategy** across **users, devices, applications, networks, data, and cloud environments**. You’ll serve as a senior technical leader driving adoption of modern security architectures that **continuously verify trust**, **minimize attack surfaces**, **enforce least-privilege access**, and **protect critical enterprise assets**. You’ll partner with **Infrastructure, Cloud, Digital Workplace, Enterprise Applications, Compliance, and Cybersecurity** to align security controls with business objectives and support a modern, flexible workforce. **Preferred hands-on experience:** **Zscaler Internet Access (ZIA)** and **Zscaler Private Access (ZPA)**. --- ## Key Responsibilities - Develop and maintain the enterprise **Zero Trust architecture roadmap** aligned to business and cybersecurity objectives. - Design and implement architectures based on **NIST SP 800-207**, **CISA Zero Trust Maturity Model**, and industry best practices. - Lead enterprise-wide Zero Trust transformation across **cloud, on-premises, and hybrid** environments. - Define **security reference architectures, standards, policies, and design principles**. - Conduct **architecture reviews** and guide new technology deployments. - Architect **micro-segmentation** and **software-defined perimeter** solutions. - Design secure access controls for: - Corporate networks - Data centers - Cloud environments - Third-party connectivity - Implement **Zero Trust Network Access (ZTNA)** and reduce reliance on traditional VPNs. - Modernize network access policies. - Architect and implement security across **Microsoft Azure** and **AWS** (including secure landing zones). - Implement cloud-native security controls and **posture management** capabilities. - Evaluate and improve **cloud identity and access security**. - Lead implementation of Zero Trust technologies and integrations. - Establish **security monitoring** and **continuous verification** capabilities. - Support **incident response** and **threat hunting**. - Identify security gaps and remediation opportunities via assessments and architecture reviews. - Develop **automation and orchestration** to improve security operations. - Translate regulatory/compliance requirements into technical security controls. - Participate in **risk assessments** and security audits. - Develop **metrics/KPIs** to measure Zero Trust maturity and effectiveness. - Present recommendations and risk findings to senior leadership. --- ## Requirements - **10+ years** in IT infrastructure, cybersecurity, or security engineering. - **5+ years** designing enterprise security architectures. - **3+ years** leading Zero Trust initiatives or enterprise identity modernization programs. - Bachelor’s degree in a related field (Master’s preferred). - Certifications (examples listed): - **Zscaler Certified Administrator (ZCCA)** - **Zscaler Certified Professional (ZCCP)** - **Microsoft Security** certifications - **CISSP / CCSP / Security+** (or equivalent) - **Microsoft SC-100**, **SC-200** - **Azure Solutions Architect Expert** - **GIAC** Security Certifications - Network certification - Experience in highly regulated industries (biotech, pharma, healthcare, financial services) preferred. - Technical expertise i

Listing freshness

CronJobs last confirmed this listing 57m ago. If its source stops confirming the opening for seven days, this page is removed from active inventory.

Browse all software engineering jobs →

Follow fresh jobs in Discord