Zero Trust Architect

Zero Trust Security Architect

Location: London, with travel to client sites as required A leading global consultancy is looking for an experienced Zero Trust Security Architect to design, deliver and optimise enterprise-scale Zero Trust security architectures for major clients.You'll work hands-on with leading platforms such as Zscaler and alongside cross-functional teams to shape secure architectures, define strategic roadmaps and support secure transformation across networks, applications and endpoints.

This is a client-facing role that combines architecture, hands-on engineering and security leadership, with the chance to deepen your expertise in modern identity-centric, cloud-first security models.Key responsibilitiesArchitecture and designLead the design and implementation of Zero Trust architectures for enterprise environments, covering users, devices, applications and dataEstablish secure access patterns using cloud-based security and Zero Trust platforms (e.g. Zscaler ZIA, ZPA, ZDX)Create enterprise-wide security blueprints and reference architectures aligned with Zero Trust principles (NIST SP 800-207, CISA)Design scalable, identity-centric security controls using SSO, MFA, device posture and least-privilege access modelsWork with networking teams to modernise WAN and remote access using cloud security and SASE frameworksImplementation and engineeringDeploy, configure and optimise Zero Trust technologies, including:Policy creation and tuning (URL filtering, DLP, CASB, FWaaS)App segmentation and connector deploymentClient Connector configuration and rolloutIntegrate Zero Trust solutions with identity providers (Microsoft Entra ID, Okta), SIEM/SOAR platforms and endpoint tools such as CrowdStrikePartner with infrastructure teams to migrate legacy VPN, proxy and firewall solutions to cloud-native Zero Trust modelsRun proof-of-concept evaluations and technical validation sessionsEssential skills and experienceTechnical5–10+ years' experience in cyber security architecture or senior engineering rolesStrong hands-on expertise with:Zscaler ZIA, ZPA and ZDX (or similar)Zscaler Client ConnectorApp Connectors, Cloud Firewall, Cloud Sandbox, DLP and CASBDeep understanding of:Zero Trust frameworks (NIST SP 800-207, SASE, SSE)Identity and access management (Microsoft Entra ID / Azure AD, Okta, Ping)Modern network design (SD-WAN, DNS security, routing fundamentals)Endpoint security (EDR/XDR, device posture assessment)Soft skillsStrong communication and stakeholder managementAbility to translate complex security concepts into business-friendly languageExperience working within large, matrixed enterprisesProven ability to lead cross-functional initiativesDesirableZscaler certifications (ZCCA-IA, ZCCA-PA, ZCCP)CISSP, CCSP or similar security credentialsCloud certifications in Azure, AWS or GCP (highly desirable)Certifications from other leading SASE/SSE vendors, such as Palo Alto Networks Prisma or NetskopeNetworking certification such as CCNA or equivalentWhat's on offerCompetitive base salary25 days' annual leavePrivate medical insuranceAdditional paid volunteering leaveHands-on experience with leading Zero Trust platforms on large-scale enterprise transformation programmes