Principal Consultant - Zscalar Architect Infosys is seeking an experienced Implementation Architect to lead the design, deployment, and integration of Zscaler Zero Trust Branch Connector solutions across enterprise branch networks. This role requires deep expertise in Zero Trust principles, secure connectivity, and network transformation strategies. You will be pivotal to problem definition and discovery of the overall solution and guide teams on project processes, deliverables. As a thought leader in your domain, you will be the key advisor to architecture and design reviews. You will anchor business pursuit initiatives, client training, in‑house capability building. You will have the opportunity to shape value‑adding consulting solutions that enable our clients to meet the changing needs of the global landscape. Required Qualifications Candidate must be located within commuting distance of Mississauga, ON or be willing to relocate to the area. Candidates authorized to work for any employer in Canada without employer-based visa sponsorship are welcome to apply. Infosys is unable to provide immigration sponsorship for this role at this time. Bachelor’s degree or foreign equivalent required from an accredited institution. Will also consider three years of progressive experience in the specialty in lieu of every year of education. At least 15 years of overall Information Technology experience. Preferred Qualifications Develop end-to-end architecture for Zscaler Branch Connector deployments in gateway and non-gateway modes. Define network segmentation, routing, and policy enforcement strategies aligned with Zero Trust principles. Lead installation, configuration, and testing of Zscaler Branch Connector hardware (ZT600, ZT800) and software (VMware, KVM). Integrate with Zscaler Internet Access (ZIA) and Zscaler Private Access (ZPA) for secure traffic forwarding. Lead technical implementation of Branch Connector hardware appliances and virtual machines. Configure WAN failover, high availability, and policy-based routing. Ensure adherence to enterprise security standards and compliance frameworks. Implement certificate-based authentication and secure onboarding (ZTP). Fine‑tune traffic flows, NAT, DHCP, and inter‑VLAN firewalling for optimal performance. Monitor and troubleshoot connectivity issues using Zscaler dashboards and analytics. Work closely with network engineering, security teams, and business units to align deployment with organizational goals. Provide technical guidance and training to internal teams. Strong knowledge of Zscaler Zero Trust Exchange , ZIA, ZPA, and Branch Connector architecture. Expertise in network design , SD‑WAN, routing protocols, NAT, DHCP, and VLAN segmentation. Hands‑on experience with Zero Touch Provisioning (ZTP) and TPM-based secure onboarding. Familiarity with firewall policies , CRL/OCSP, and certificate management. Proficiency in troubleshooting network and security issues in hybrid environments. The job may also entail sitting as well as working at a computer for extended periods of time. Candidates should be able to effectively communicate by telephone, email, and face to face. Estimated annual compensation range for the candidate based in the below location will be:Ontario: $102,474 to $147,836 EEO Infosys provides equal employment opportunities to applicants and employees without regard to race; color; sex; gender identity; sexual orientation; religious practices and observances; national origin; pregnancy, childbirth, or related medical conditions; status as a protected veteran or spouse/family member of a protected veteran; or disability. #J-18808-Ljbffr