Zero Trust Security Architect – London

Overview

In this role you design, implement, and optimize enterprise-scale Zero Trust architectures within a global professional services context. You collaborate with cross-functional teams to shape secure reference architectures and roadmaps aligned with Zero Trust principles. You’ll work hands-on with leading platforms like Zscaler to enable identity-centric, cloud-first security across networks, applications, and endpoints. This role offers influence on security strategy and practical delivery, with client-facing impact.

Pay / Benefits

• 30 days vacation per year
• Private medical insurance
• 3 extra days leave per year for charitable work
• Flexibility and mobility to visit client sites
• Competitive basic salary
• Extensive benefits package

Responsibilities

• Lead design and implementation of Zero Trust architectures for large enterprises (users, devices, apps, data)
• Define secure access patterns using cloud security and Zero Trust platforms (Zscaler ZIA, ZPA, ZDX)
• Create enterprise-wide security blueprints aligned with Zero Trust (NIST 800-207, CISA)
• Design scalable identity-centric controls (SSO, MFA, device posture, least-privilege)
• Collaborate with networking to modernize WAN/remote access using SASE
• Deploy, configure, and optimize Zero Trust tech (policy, URL filtering, DLP, CASB, FWaaS)
• Manage app segmentation, connectors, and Zero Trust Client Connector rollout
• Integrate with IAM providers (Entra AD, Okta, Ping), SIEM/SOAR, and endpoint platforms (CrowdStrike)
• Migrate legacy VPN/proxy/firewall to cloud-native Zero Trust models
• Conduct PoC evaluations and technical validation sessions
• Provide architectural governance and security best-practices across projects
• Troubleshoot deployment issues and monitor telemetry; mentor teams

Key requirements

• Extensive experience in cybersecurity architecture or senior engineering roles
• Hands-on with Zscaler ZIA, ZPA, ZDX or similar; Zscaler Client Connector
• Experience with App Connectors, Cloud Firewall, Cloud Sandbox, DLP, CASB
• Deep understanding of Zero Trust frameworks (NIST 800-207, SASE, SSE)
• Identity and access management (Azure AD, Okta, Ping)
• Modern network design (SD-WAN, DNS security)
• Endpoint security (EDR/XDR, device posture)

• Strong communication and stakeholder management
• Ability to translate security concepts for business audiences
• Experience in large, matrixed enterprises
• Zscaler ZIA/ZPA/ZDX
• Zscaler Client Connector
• App Connectors, Cloud Firewall, Cloud Sandbox, DLP, CASB

…