Security Architect

Zscaler

Security Architect developing secure capabilities for agentic AI systems at Zscaler. A hands-on role building security features for AI applications in a remote capacity.

Posted 5/14/2026full-timeRemote • California • 🇺🇸 United StatesSeniorLead💰 $182,000 - $260,000 per yearWebsite

Tech Stack

Tools & technologies

AWSAzureCloudGoogle Cloud PlatformKubernetesNode.jsPythonTypeScript

About the role

Key responsibilities & impact

Build secure agent runtimes, libraries, and reference implementations while implementing core agent patterns like planner/executor, tool routing, and RAG boundaries
Build and secure MCP servers, clients, tool registries, and connector patterns with robust authentication, authorization, and audit logging
Enforce secure-by-default controls including schema validation, tool allowlists, redaction, and policy checks
Threat model and test agent workflows for prompt injection and data exfiltration to build repeatable security evaluations

Requirements

What you’ll need

Extensive experience designing and implementing agent runtimes including planning, tool calling, and memory/state controls
8+ years of experience shipping production security engineering solutions with strong coding skills in Python, TypeScript, or Node
Practical experience integrating frontier model APIs with structured outputs, streaming, and safety controls
Familiarity with agent frameworks such as LangGraph, LangChain, or Semantic Kernel and the ability to extend them securely
Solid experience in cloud security for AWS, GCP, or Azure along with Kubernetes security and Infrastructure as Code

Benefits

Comp & perks

Various health plans
Time off plans for vacation and sick time
Parental leave options
Retirement options
Education reimbursement
In-office perks, and more!

ATS Keywords

✓ Tailor your resume

Applicant Tracking System Keywords

Tip: use these terms in your resume and cover letter to boost ATS matches.

Hard Skills & Tools

PythonTypeScriptNodeagent runtimessecurity engineeringschema validationtool allowlistsKubernetes securityInfrastructure as Codethreat modeling