Zero trust security architect

Salary: £37,000 - 68,500 per year Requirements: We are looking for strong experience in cyber security architecture or senior security engineering roles. We require hands-on expertise with Zero Trust and SASE technologies such as Zscaler, Netskope, Prisma Access, or similar platforms. We need a strong understanding of Zero Trust principles, identity security, and cloud-native security architectures. We require experience with identity and access management technologies including Entra ID, Okta, or Ping. We need a good understanding of networking concepts including SD-WAN, DNS security, routing, and secure remote access. We require experience with endpoint security, EDR/XDR platforms, and device posture assessment. We are looking for strong stakeholder engagement and communication skills, with the ability to explain technical concepts to both technical and non-technical audiences. We require experience working within large enterprise or consulting environments. Desirable: Zscaler certifications such as ZCCA or ZCCP. Desirable: CISSP, CCSP, or equivalent security certifications. Desirable: Cloud certifications across Azure, AWS, or GCP. Desirable: Experience with other SSE/SASE vendors such as Palo Alto Prisma or Netskope. Desirable: Networking certifications such as CCNA or equivalent. Candidates must be eligible for Security Clearance (SC). No sponsorship is available for this position. Responsibilities: We design and implement enterprise Zero Trust architectures aligned to modern security frameworks such as NIST 800-207 and SASE/SSE principles. We deliver secure access solutions using technologies such as Zscaler ZIA, ZPA, and ZDX. We create enterprise-wide security blueprints, standards, and reference architectures. We design identity-centric controls using SSO, MFA, conditional access, device posture, and least privilege principles. We support migration from traditional VPN and perimeter-based security models to cloud-native Zero Trust environments. We configure and optimise security policies including DLP, CASB, FWaaS, segmentation, and secure web access. We integrate Zero Trust solutions with identity providers, SIEM/SOAR platforms, and endpoint security tooling. We conduct threat modelling, risk assessments, and security architecture reviews. We troubleshoot complex deployment and access issues across enterprise environments. We provide technical leadership and guidance across security and networking teams. We may require some client site travel depending on project needs. Technologies: AWS Azure Cloud GCP Support Prisma Security VPN Web Architect More: We are a leading global technology and transformation consultancy delivering large-scale enterprise security transformation programmes across public and private sector clients. We offer an excellent benefits package, bonus, hybrid working, and UK-wide opportunities, with the role based in Central London. This is an opportunity to join our growing cyber security practice and help organisations modernise legacy security architectures and implement cloud-first, identity-centric Zero Trust models across complex enterprise environments. last updated 24 week of 2026