Principal Consultant - Zscalar Architect, Mississauga

Job Overview Infosys is seeking an experienced

Implementation Architect

to lead the design, deployment, and integration of

Zscaler Zero Trust Branch Connector

solutions across enterprise branch networks. This role requires deep expertise in Zero Trust principles, secure connectivity, and network transformation strategies.

Responsibilities You will be pivotal to problem definition and discovery of the overall solution and guide teams on project processes and deliverables. As a thought leader in your domain, you will be the key advisor to architecture and design reviews. You will anchor business pursuit initiatives, client training, and in‑house capability building. You will have the opportunity to shape value‑adding consulting solutions that enable our clients to meet the changing needs of the global landscape.

The job may also entail sitting as well as working at a computer for extended periods of time. Candidates should be able to effectively communicate by telephone, email, and face to face.

Required Qualifications

Candidate must be located within commuting distance of Mississauga, ON or be willing to relocate to the area.

Candidates authorized to work for any employer in Canada without employer‑based visa sponsorship are welcome to apply. Infosys is unable to provide immigration sponsorship for this role at this time.

Bachelor’s degree or foreign equivalent required from an accredited institution. Three years of progressive experience in the specialty may be considered in lieu of every year of education.

At least 15 years of overall Information Technology experience.

Preferred Qualifications

Develop end‑to‑end architecture for Zscaler Branch Connector deployments in gateway and non‑gateway modes.

Define network segmentation, routing, and policy enforcement strategies aligned with Zero Trust principles.

Lead installation, configuration, and testing of Zscaler Branch Connector hardware (ZT600, ZT800) and software (VMware, KVM).

Integrate with Zscaler Internet Access (ZIA) and Zscaler Private Access (ZPA) for secure traffic forwarding.

Lead technical implementation of Branch Connector hardware appliances and virtual machines.

Configure WAN failover, high availability, and policy‑based routing.

Ensure adherence to enterprise security standards and compliance frameworks.

Implement certificate‑based authentication and secure onboarding (ZTP).

Fine‑tune traffic flows, NAT, DHCP, and inter‑VLAN firewalling for optimal performance.

Monitor and troubleshoot connectivity issues using Zscaler dashboards and analytics.

Work closely with network engineering, security teams, and business units to align deployment with organizational goals.

Provide technical guidance and training to internal teams.

Strong knowledge of Zscaler Zero Trust Exchange, ZIA, ZPA, and Branch Connector architecture.

Expertise in network design, SD‑WAN, routing protocols, NAT, DHCP, and VLAN segmentation.

Hands‑on experience with Zero Touch Provisioning (ZTP) and TPM‑based secure onboarding.

Familiarity with firewall policies, CRL/OCSP, and certificate management.

Proficiency in troubleshooting network and security issues in hybrid environments.

Compensation Annual compensation range for Ontario: $102,474 to $147,836.

Equal Employment Opportunity Infosys provides equal employment opportunities to applicants and employees without regard to race, color, sex, gender identity, sexual orientation, religious practices and observances, national origin, pregnancy, childbirth, or related medical conditions, status as a protected veteran or spouse/family member of a protected veteran, or disability.

#J-18808-Ljbffr