Security Consultant (Zero Trust)

We are looking for an experienced Zero Trust Security Architect to design, implement and optimise enterprise-scale Zero Trust security architectures.You’ll work across users, devices, applications and data, helping organisations modernise their security through cloud-first, identity-centric and SASE-based approaches. The role offers hands-on exposure to leading Zero Trust technologies, including Zscaler, while working with cross-functional security, networking and infrastructure teams.Key ResponsibilitiesDesign and implement enterprise Zero Trust architectures aligned to NIST 800-207 and CISA principles.Develop secure access models using Zscaler ZIA, ZPA, ZDX and Client Connector.Design identity-centric controls covering SSO, MFA, device posture and least privilege.Deploy and optimise technologies including DLP, CASB, FWaaS, Cloud Firewall and App Connectors.Integrate Zero Trust platforms with Entra ID, Okta, SIEM/SOAR and endpoint security platforms.Support migration from legacy VPN, proxy and firewall technologies to modern Zero Trust models.Conduct POCs, technical validation, threat modelling and security gap assessments.Troubleshoot and optimise Zero Trust deployments, telemetry and access controls.Provide technical guidance, mentorship and architectural governance.Key Requirements5–10+ years’ experience in cybersecurity architecture or senior engineering roles.Strong hands-on experience with Zscaler ZIA, ZPA, ZDX and Client Connector or similar Zero Trust technologies.Experience with App Connectors, Cloud Firewall, Cloud Sandbox, DLP and CASB.Strong understanding of Zero Trust, NIST 800-207, SASE and SSE.Knowledge of IAM, Entra ID/Azure AD, Okta or Ping.Understanding of SD-WAN, DNS security, routing and endpoint security/EDR/XDR.Strong communication and stakeholder management skills.Ability to explain complex security concepts to technical and non-technical audiences.Experience working in large, matrixed enterprise environments.Desirable CertificationsZscaler certifications such as ZCCA-IA, ZCCA-PA or ZCCP.CISSP, CCSP or equivalent.Azure, AWS or GCP cloud certifications.SASE/SSE certifications such as Palo Alto Prisma or Netskope.CCNA or equivalent networking certification.