Arctiq

Engineer

• Design and deliver end‑to‑end Zero Trust architecture focusing on Zscaler components.
• Lead the transition from legacy networks to modern secure access models.
• Establish reusable architecture patterns and best practices.
• Manage multiple priorities in fast-paced environments.

Senior Zscaler Engineer - Contract

Architect

• Enterprise IAM Architecture & Multi-Cloud Governance
• Design and enforce IAM least-privilege models across AWS Organizations, Landing Zones, and Service Control Policies (SCPs)
• Lead zero trust initiatives end-to-end: verify-explicitly policies, Just-in-Time (JIT) / Just-Enough-Access (JEA) provisioning, CIEM integration, and identity platform governance.
• Define and maintain approved access patterns for services and users, aligned to predefined roles (Reader, Contributor, Administrator) and documented as policy-as-code.
• Implement and govern OAuth/OIDC flows, service mesh identity controls, and federated identity across cloud and on-prem environments.
• Maintain a comprehensive inventory of all approved AWS and Azure services, cataloging IAM resources and differentiating between control plane (roles, policies) and data plane (user/key/role/policy/group) resources.
• Manage credentials for local data plane resources in vaults; ensure resource policies are applied consistently across services.
• Utilize Wiz (CSPM) for cloud asset inventory, compliance reporting, evidence collection, and correlation to AWS/Azure/GCP documentation.
• Identify and govern external dependencies including secrets, keys, and cross-account policies.
• Develop a comprehensive metadata tagging strategy mapped to application service lines (ASL), environments, and repository associations.
• Design and build reusable IAM modules for each service access pattern, published to the service registry with consistent enforcement of naming conventions, metadata, and parameters.
• Embed IAM guardrails and policy-as-code controls natively into IaC templates (Terraform, CloudFormation) and CI/CD pipelines for secure-by-default provisioning.
• Develop methodologies and criteria for pre-approved service registry modules deployable via pipelines vs. those requiring manual review.
• Define and enforce controls pertinent to IAM and cloud security standards across all services; implement a shift-left strategy to proactively address IAM cloud operations.
• Guide and contribute to secure microservices development in Python and Go on AWS, Azure, and GCP, including async and event-driven architectures.
• Establish methods to correlate modules with service resource policies and user roles/policies.
• Document IAM configurations for pipelines, repositories, and all cloud services; develop and maintain IAM SDLC documentation.
• Develop a comprehensive IAM Cloud program strategy, defining its functions, roadmap, and maturity model.

IAM Architect – Contract

Security Operations

• Develop YARA-L 2.0 rules
• Lead SecOps project delivery
• Track work and provide reporting
• Participate in cybersecurity initiatives
• Process tickets for platform issues

Senior Zscaler Engineer - Contract

IAM Architect – Contract

SecOps Consultant