Jason Agosto

About Jason Agosto

I focus on designing and implementing Zero Trust architectures with identity as the control plane. Most organizations still rely on VPN and network-based trust models, which increase risk and limit visibility. My work centers on replacing that approach with identity-driven access using modern Secure Service Edge (SSE) platforms. I design and operationalize access models aligned to both NIST 800-207 and CISA Zero Trust Maturity Model, translating Zero Trust strategy into practical, enforceable controls. Core areas: • Identity & Access Management (Microsoft Entra ID) • Secure Service Edge (Zscaler, Cloudflare) • ZTNA (application-level access, no VPN) • Policy design and enforcement • Identity-driven access governance across users, devices, and applications I’ve worked in enterprise environments and am now focused on applying those same principles in practical, scalable ways across both enterprise and SMB environments. Currently building: • Cloudflare + Entra ID Zero Trust lab environments • SMB-focused Zero Trust deployment models • Structured implementation and transformation frameworks aligned to ZT maturity progression If you’re working on Zero Trust, SSE, or identity-driven security, I’m always open to connecting.

Experience

1. Zero Trust Architect Zscaler Sse Platform (Healthcare)

   Insight Global

   Feb 2026 — Present

   Insight Global — Zero Trust Architect – Zscaler SSE Platform (Healthcare)Contract – Tampa General Hospital | Feb 2026 – Present | Remote• Supporting enterprise Zero Trust modernization across 28 healthcare locations serving users, integrating Microsoft Entra ID with synchronized identity groups for identity-based policy enforcement.• Supporting Zscaler Internet Access (ZIA) deployment including GRE tunnel integration from Fortinet firewalls and internet security policy enforcement.• Assisting with Zscaler Private Access (ZPA) segmentation of internal applications including App Segments, Server Groups, and Connector placement.• Supporting rollout and monitoring of Zscaler Digital Experience (ZDX) for clinical and enterprise applications.• Troubleshooting Zscaler Client Connector authentication, DNS resolution, and traffic forwarding across endpoints.• Leveraging Zscaler Experience Center for cross-product visibility and troubleshooting across ZIA, ZPA, and ZDX.