Security Consultant

We are looking for an experienced

Zero Trust Security Architect

to design, implement and optimise enterprise-scale Zero Trust security architectures. You'll work across users, devices, applications and data, helping organisations modernise their security through

cloud-first, identity-centric and SASE-based approaches . The role offers hands-on exposure to leading Zero Trust technologies, including Zscaler, while working with cross-functional security, networking and infrastructure teams. Key Responsibilities

Design and implement

enterprise Zero Trust architectures

aligned to NIST 800-207 and CISA principles. Develop secure access models using

Zscaler ZIA, ZPA, ZDX and Client Connector . Design identity-centric controls covering

SSO, MFA, device posture and least privilege . Deploy and optimise technologies including

DLP, CASB, FWaaS, Cloud Firewall and App Connectors . Integrate Zero Trust platforms with

Entra ID, Okta, SIEM/SOAR and endpoint security platforms . Support migration from legacy VPN, proxy and firewall technologies to modern Zero Trust models. Conduct POCs, technical validation, threat modelling and security gap assessments. Troubleshoot and optimise Zero Trust deployments, telemetry and access controls. Provide technical guidance, mentorship and architectural governance. Key Requirements

5–10+ years' experience

in cybersecurity architecture or senior engineering roles. Strong hands-on experience with

Zscaler ZIA, ZPA, ZDX and Client Connector

or similar Zero Trust technologies. Experience with

App Connectors, Cloud Firewall, Cloud Sandbox, DLP and CASB . Strong understanding of

Zero Trust, NIST 800-207, SASE and SSE . Knowledge of

IAM, Entra ID/Azure AD, Okta or Ping . Understanding of

SD-WAN, DNS security, routing and endpoint security/EDR/XDR . Strong communication and stakeholder management skills. Ability to explain complex security concepts to technical and non-technical audiences. Experience working in large, matrixed enterprise environments. Desirable Certifications

Zscaler certifications such as

ZCCA-IA, ZCCA-PA or ZCCP . CISSP, CCSP

or equivalent. Azure, AWS or GCP

cloud certifications. SASE/SSE certifications such as

Palo Alto Prisma or Netskope . CCNA

or equivalent networking certification.

TPBN1_UKTJ

Report this job