Zero Trust Architect

Project overview

Our client in the Aerospace and Defense sector is looking for a Zero Trust Architect (m/f/d).

Mission Description:

The mission consists of supporting the company in defining the security framework using ZTNA for its various use cases: partner access, applications published on the internet, and access to internal applications via ZPA or from company sites.

If necessary, the provider will propose a POC using existing test environments.

The mission will cover project definition and the production of:

Project Scope

Definition, design, and integration of Zero Trust access architectures

The architectures must secure the following use cases:

Zscaler costs, including licenses and any hardware, will be covered under the group contract.

For the architecture definition, the architect in charge will work with experts from the following domains:

They will report to the network architect manager and the project manager.

Organizational Environment

The project team includes:

Technical Environment

The technical environment includes:

Expected Technical Expertise

• The General Technical Architecture Document (DATG).
• The Detailed Technical Architecture Document (DATD).
• The migration strategy.
• The test plan.
• The solution integration.
• Access to internal applications, with ZTNA implementation from ZPA or from company sites.
• Company applications exposed on the internet and currently protected by a WAF.
• Partner access currently based on IPsec connections.
• Network.
• Information Security.
• Identity.
• Workstation.
• PKI.
• Applications.
• Operations.
• A Network and Security Architecture Referent.
• The team in charge of the Zero Trust platform and Zscaler.
• The Identity, Active Directory, MFA, and PKI teams.
• The Workstation teams.
• The Applications team.
• The Operations teams.
• The Project Manager.
• The Information Systems Security Manager.
• Existing Zscaler services, particularly ZPA and ZIA depending on their role in the target architecture.
• Identity services, directories, multi-factor authentication, and certificates.
• DNS, PKI, firewall, proxy, logging, and monitoring services.
• Internal workstations and authorized external workstations according to the selected use cases.

Requirements

Expected Deliverables

The mission will include:

All documents must be written in English.

Regular activity monitoring will be carried out using the company's documentation templates.

Essential Skills / Qualities:

Network and security architecture., Zero Trust principles and ZTNA architectures., Zscaler Private Access (ZPA), Zscaler Internet Access (ZIA) and Client Connector., Identity and access management, Active Directory, MFA and federation., PKI, certificates, revocation and endpoint compliance control., DNS, routing, firewalls, proxies and traffic analysis., Migration of critical architectures with coexistence, reversibility and service continuity.

• Network and security architecture.
• Zero Trust principles and ZTNA architectures.
• Zscaler Private Access (ZPA), Zscaler Internet Access (ZIA), and Client Connector.
• Identity and access management, Active Directory, MFA, and federation.
• PKI, certificates, revocation, and endpoint compliance control.
• DNS, routing, firewalls, proxies, and traffic analysis.
• Migration of critical architectures with coexistence, reversibility, and service continuity.
• Project launch.
• Coordination of architecture workshops.
• Definition of Zero Trust principles applicable to different use cases.
• Definition of access policies based on populations, applications, location, workstation compliance level, and chosen trust levels.
• Formalization of technical architectures integrating existing components and description of impacts on these components, taking into account the company's security and urbanization principles.
• Writing the General Technical Architecture Document (DATG).
• Writing the Detailed Technical Architecture Document (DATD), in coordination with the relevant experts.
• High-level formalization of integration operations.
• Writing the migration, coexistence, cutover, and rollback strategy.
• Definition of the technical, security, and operational testing and acceptance plan.
• Skills transfer to internal teams.
• Solution integration and acceptance testing.
• Identification of impacts on existing standards and deployment kits, as well as updating relevant documents.
• Execution of POCs and pilots representative of the following use cases.

Nice to have

/

Information regarding teleworking:

Yes — 2 days/week

Project details

• Start: flexible
• Remote: hybrid
• Location: 92240 Malakoff, France, FR
• Rate: 97-97 EUR/h
• Languages: French