// Zero Trust · SASE · SD-WAN · OT/ICS Security
IoTSoft Solutions designs and operates Zero Trust and SASE architectures for enterprises that can't afford ambiguity — from Zscaler ZIA/ZPA/ZDX deployments to SD-WAN traffic engineering and hardened OT/ICS networks for industrial sites.
// What we deliver
Every engagement is led by the same engineer who administers the tenants, reads the packet captures, and owns the Sev 1 tickets — not a hand-off between sales and delivery.
Design and deployment of ZTNA/SASE environments across Zscaler ZIA, ZPA, and ZDX, aligned to Zero Trust principles from the ground up.
Resilient traffic-forwarding designs, PAC-file strategy, GRE/IPsec tunneling, and Z-Tunnel configuration for distributed, hybrid networks.
Purdue-model network design, segmentation, and hardening for offshore and onshore industrial sites, refineries, and process-control environments.
Ownership of security incidents from triage to root-cause resolution, using PCAP analysis, ZDX hop-by-hop diagnostics, and SAML/MFA flow tracing.
AI application discovery, access governance, and GenAI data-protection guardrails using Zscaler AI Security and NIST AI RMF principles.
Day-to-day operation and policy tuning of ZIA/ZPA/ZDX tenants, URL filtering, Cloud Firewall, App Segments, and Client Forwarding Profiles.
// Platforms & industries
// How we engage
Network and security assessment: traffic analysis, firewall-rule review, and compliance alignment against your current posture.
Solution design covering forwarding, segmentation, identity integration, and Zero Trust policy — documented, not improvised.
Staged rollout with FAT/SAT-style test procedures, PAC-file and policy migration, and stakeholder sign-off at each stage.
Ongoing tenant health, incident response, and enhancement backlog work — the same engineer who designed it keeps it running.
// Led by
Over 30 years of enterprise infrastructure, architecture, and operations experience, including more than five years focused on Zscaler SASE and Zero Trust. Career spans principal design work at Honeywell Process Solutions on industrial OT/ICS networks, global MPLS/BGP operations at Schlumberger, systems engineering at Cisco, and current enterprise Zscaler administration for UnitedHealth Group. Currently expanding into secure AI adoption and Zscaler AI Security.
// Get in touch
Share a few details about your environment and we'll respond within one business day.