Security Architect – Zero Trust / Application Access
Location: Hybrid great but remote is also Fine
Type: Contract – 3 months + possible long term extension onto other projects

Interviews: Starting next week

About the Role
Our client is building a secure-access strategy for internal business applications that have never been exposed outside the corporate network, since there is no traditional VPN. They need a hands-on Security Architect or Application Security Lead to review those applications, decide how each one should be accessed, and set the security standards and patterns that govern access from here forward. Zscaler will be the core access platform.

What You'll Do

• Review the internal-only application portfolio and assess each app's risk, data sensitivity, and access requirements
• Recommend for each application whether it can be exposed publicly or should stay limited to managed, company-issued devices
• Design and implement Zero Trust access patterns using Zscaler (ZPA/ZIA), replacing the need for a traditional VPN
• Create, document, and roll out security standards and reference patterns for application access, authentication, and authorization
• Update existing application security standards so they reflect the new access model
• Partner with application owners, infrastructure, networking, and IAM teams to get approval for the access model and put it in place
• Present findings, risks, and recommendations to IT and security leadership

What You Bring

• 8+ years in information security, with significant time in security architecture or application security leadership
• Hands-on experience designing and implementing Zero Trust architecture (this is critical)
• Hands-on Zscaler experience (ZPA and/or ZIA) strongly preferred
• Strong application security background, including threat modeling, secure design reviews, and authentication/SSO (SAML, OAuth, OIDC)
• Experience deciding how applications should be exposed (public, private, or device-restricted) and securing each scenario
• Familiarity with device posture checks, conditional access, and IAM platforms (Okta, Azure AD/Entra ID, or similar)
• Proven ability to write clear security standards and patterns that engineering teams actually adopt
• Strong communication skills, with comfort presenting to leadership and working across teams

Nice to Have

• CISSP, CCSP, Zscaler certifications (ZCCA/ZCCP), or similar
• Experience with WAF, reverse proxy, or API gateway security
• Background in enterprise or automotive/financial services environments

About INSPYR Solutions
Technology is our focus and quality is our commitment. As a national expert in delivering flexible technology and talent solutions, we strategically align industry and technical expertise with our clients' business objectives and cultural needs. Our solutions are tailored to each client and include a wide variety of professional services, project, and talent solutions. By always striving for excellence and focusing on the human aspect of our business, we work seamlessly with our talent and clients to match the right solutions to the right opportunities. Learn more about us at inspyrsolutions.com.

INSPYR Solutions provides Equal Employment Opportunities (EEO) to all employees and applicants for employment without regard to race, color, religion, sex, national origin, age, disability, genetics, or any other protected status. INSPYR Solutions complies with all applicable laws governing nondiscrimination in employment in every location in which the company has facilities. Applicants requiring reasonable accommodation during the application or interview process should contact HR@inspyrsolutions.com for assistance.

Information collected and processed through your application with INSPYR Solutions (including any job applications you choose to submit) is subject to INSPYR Solutions' Privacy Policy and INSPYR Solutions' AI and Automated Employment Decision Tool Policy: https://www.inspyrsolutions.com/policies/. By submitting an application, you are consenting to being contacted by INSPYR Solutions through phone, email, or text.

26-160311