Security Architect
Anson Mccade
We are looking for an experienced
Zero Trust Security Architect
to design, implement and optimise enterprise-scale Zero Trust security architectures. You'll work across users, devices, applications and data, helping organisations modernise their security through
cloud-first, identity-centric and SASE-based approaches . The role offers hands-on exposure to leading Zero Trust technologies, including Zscaler, while working with cross-functional security, networking and infrastructure teams. Key Responsibilities
Design and implement
enterprise Zero Trust architectures
aligned to NIST 800-207 and CISA principles. Develop secure access models using
Zscaler ZIA, ZPA, ZDX and Client Connector . Design identity-centric controls covering
SSO, MFA, device posture and least privilege . Deploy and optimise technologies including
DLP, CASB, FWaaS, Cloud Firewall and App Connectors . Integrate Zero Trust platforms with
Entra ID, Okta, SIEM/SOAR and endpoint security platforms . Support migration from legacy VPN, proxy and firewall technologies to modern Zero Trust models. Conduct POCs, technical validation, threat modelling and security gap assessments. Troubleshoot and optimise Zero Trust deployments, telemetry and access controls. Provide technical guidance, mentorship and architectural governance. Key Requirements
5–10+ years' experience
in cybersecurity architecture or senior engineering roles. Strong hands-on experience with
Zscaler ZIA, ZPA, ZDX and Client Connector
or similar Zero Trust technologies. Experience with
App Connectors, Cloud Firewall, Cloud Sandbox, DLP and CASB . Strong understanding of
Zero Trust, NIST 800-207, SASE and SSE . Knowledge of
IAM, Entra ID/Azure AD, Okta or Ping . Understanding of
SD-WAN, DNS security, routing and endpoint security/EDR/XDR . Strong communication and stakeholder management skills. Ability to explain complex security concepts to technical and non-technical audiences. Experience working in large, matrixed enterprise environments. Desirable Certifications
Zscaler certifications such as
ZCCA-IA, ZCCA-PA or ZCCP . CISSP, CCSP
or equivalent. Azure, AWS or GCP
cloud certifications. SASE/SSE certifications such as
Palo Alto Prisma or Netskope . CCNA
or equivalent networking certification.
TPBN1_UKTJ
Zero Trust Security Architect
to design, implement and optimise enterprise-scale Zero Trust security architectures. You'll work across users, devices, applications and data, helping organisations modernise their security through
cloud-first, identity-centric and SASE-based approaches . The role offers hands-on exposure to leading Zero Trust technologies, including Zscaler, while working with cross-functional security, networking and infrastructure teams. Key Responsibilities
Design and implement
enterprise Zero Trust architectures
aligned to NIST 800-207 and CISA principles. Develop secure access models using
Zscaler ZIA, ZPA, ZDX and Client Connector . Design identity-centric controls covering
SSO, MFA, device posture and least privilege . Deploy and optimise technologies including
DLP, CASB, FWaaS, Cloud Firewall and App Connectors . Integrate Zero Trust platforms with
Entra ID, Okta, SIEM/SOAR and endpoint security platforms . Support migration from legacy VPN, proxy and firewall technologies to modern Zero Trust models. Conduct POCs, technical validation, threat modelling and security gap assessments. Troubleshoot and optimise Zero Trust deployments, telemetry and access controls. Provide technical guidance, mentorship and architectural governance. Key Requirements
5–10+ years' experience
in cybersecurity architecture or senior engineering roles. Strong hands-on experience with
Zscaler ZIA, ZPA, ZDX and Client Connector
or similar Zero Trust technologies. Experience with
App Connectors, Cloud Firewall, Cloud Sandbox, DLP and CASB . Strong understanding of
Zero Trust, NIST 800-207, SASE and SSE . Knowledge of
IAM, Entra ID/Azure AD, Okta or Ping . Understanding of
SD-WAN, DNS security, routing and endpoint security/EDR/XDR . Strong communication and stakeholder management skills. Ability to explain complex security concepts to technical and non-technical audiences. Experience working in large, matrixed enterprise environments. Desirable Certifications
Zscaler certifications such as
ZCCA-IA, ZCCA-PA or ZCCP . CISSP, CCSP
or equivalent. Azure, AWS or GCP
cloud certifications. SASE/SSE certifications such as
Palo Alto Prisma or Netskope . CCNA
or equivalent networking certification.
TPBN1_UKTJ
Reference: WJ-5375_9747361