Cybersecurity Consultant (Zero Trust Architect)

Role Overview

Architecture and Implementation

• Design and maintain Zero Trust architectures, standards, reference architectures, and adoption roadmaps.
• Assess security gaps and implement least privilege, continuous verification, device trust, and risk-based access controls.
• Design and support IAM, SSO, MFA, ITDR, ZTNA, micro-segmentation, and identity-based access controls.
• Integrate identity, endpoint, network, application, cloud, and security telemetry for policy enforcement.

Security Operations and Troubleshooting

• Monitor and investigate identity threats, suspicious authentication, privileged access, directory security events, and indicators of compromise.
• Support SIEM, SOAR, EDR/XDR, UEBA, MDM/UEM, and NAC integrations.
• Provide L2/L3 troubleshooting, root-cause analysis, incident investigation, remediation, and vendor escalation.
• Perform security architecture reviews, maturity assessments, risk assessments, and control-gap analyses.

Documentation and Customer Support

• Develop high-level and low-level designs, architecture diagrams, technical documentation, recommendations, and implementation roadmaps.
• Provide technical guidance and knowledge transfer to customer teams and support continuous security improvement.

Required Qualifications

• Bachelor's degree in Cybersecurity, Information Security, Computer Science, IT, or a related field.
• At least 5 years of experience in Zero Trust, IAM, cybersecurity, identity security, or infrastructure security.
• Strong knowledge of Zero Trust Architecture, IAM, authentication, authorization, MFA, and ITDR.
• Working knowledge of SAML 2.0, OAuth 2.0, OIDC, LDAP, and Kerberos.
• Strong knowledge of Active Directory, Microsoft Entra ID, and hybrid identity architectures.
• Understanding of ZTNA, micro-segmentation, NAC, device trust, conditional access, and risk-based authentication.
• Hands-on experience with at least two or three relevant identity, endpoint, Zero Trust, SIEM, or EDR/XDR platforms.
• Experience with enterprise production environments and complex security architectures.

Preferred Qualifications

• Knowledge of NIST SP 800-207 and Zero Trust maturity concepts is preferred.
• Relevant CISSP, CISM, GIAC, Microsoft, Zero Trust, IAM, or vendor-specific security certifications are preferred.

Benefits

• Health insurance, career progression, wellness campaigns, annual flight tickets to the home country, and learning and development opportunities are offered.
• The company describes the working environment as flexible and hybrid.

About Help AG