Architect – Zero Trust Network Access

CACI Ltd; Greater London; Hybrid; GBP 90,000 - 130,000; Full time

Benefits offered by this job

Hybrid work model

Inclusive workplace

Job summary

CACI Network Services in London is seeking an Architect – Zero Trust Network Access (ZTNA) to lead the design, engineering, and evolution of the ZTNA platform, supporting corporate and BYOD devices across the organisation.

You will drive secure access solutions and work with Product Management on backlog prioritisation, balancing security with scalability and user experience in an agile, multi-time-zone environment.

Qualifications

• Agile and/or ITIL certification preferred.
• Relevant networking and cybersecurity certifications desirable.

Responsibilities

• Design, develop, and enhance a global Zero Trust Network Access solution for 100,000+ users.
• Identify opportunities for automation, telemetry improvements, and operational efficiencies.
• Drive platform enhancements and collaborate with vendors to improve product capabilities.
• Provide technical leadership for ZTNA engineering initiatives and roadmap delivery.
• Manage complex technical issues, incident and escalation processes.
• Create and maintain technical documentation including designs, release notes, tests and procedures.
• Collaborate with security, infrastructure, and product teams to meet standards.

Skills

ZTNA

Security architecture

Networking

VPN/Remote Access

Azure AD

SAML

Jira

Confluence

Splunk

Wireshark

Education

Agile/ITIL certification

Tools

Jira

Confluence

Splunk

Fiddler

Wireshark

ServiceNow

Job description

From our headquarters in London, we're busy empowering organisations to make bold, strategic moves with the power of data and technology. Founded in 1975, our operations take place from multiple offices across the UK, Europe and India with over 1600 Full time employees and an annual turnover of £179m.

Our expertise spans industries, from retail and education to public sector and transport - delivering intelligent solutions that drive progress and create measurable impact. Whether it's business intelligence, customer marketing, cloud infrastructure, cybersecurity, critical national infrastructure or data management, our approach is never one-size-fits-all.

We don't just deliver solutions; we build for the tomorrow's world, all while fostering a culture that allows employees to be their authentic selves and succeed in their careers.

About Network Services

CACI Network Services is a rapidly expanding specialist IT and Networks consultancy offering a wide variety of opportunities to work within challenging and exciting environments with our major clients in Global Media, Banking, Government, Telecoms & Utilities.

Architect – Zero Trust Network Access (ZTNA)

Location: London

Role Overview

The Remote Access team within End User Computing is responsible for delivering secure remote access capabilities for both corporate and BYOD devices across the organisation. Operating within an agile environment, the team is structured into dedicated delivery squads, each focused on a specific technology domain.

The Architect will be responsible for leading the design, engineering, and evolution of the Zero Trust Network Access (ZTNA) platform supporting both corporate and personal iOS, Windows, and macOS devices. This role will drive the development of secure access solutions, work closely with Product Management on backlog refinement and prioritisation, and ensure an optimal balance between security, scalability, and user experience.

Key Responsibilities

• Design, develop, and enhance a global Zero Trust Network Access solution supporting over 100,000 users.
• Identify opportunities for automation, telemetry improvements, and operational efficiencies.
• Drive platform enhancements and work with vendors to improve product capabilities.
• Provide technical leadership for ZTNA engineering initiatives and roadmap delivery.
• Manage complex technical issues, problem management activities, and L3 support escalations.
• Build and maintain technical documentation, including solution designs, release notes, testing documentation, and operational procedures.
• Collaborate with technology, security, and infrastructure teams to ensure solutions meet security, compliance, and engineering standards.
• Design and document Zero Trust architecture, standards, and implementation strategies.
• Oversee engineering activities across the ZTNA platform estate.
• Ensure adherence to SDLC, engineering governance, and release management processes.

Required Skills & Experience

Technical Expertise

• Extensive hands-on experience delivering VPN, Remote Access, and Cyber Security solutions within large enterprise environments.
• Strong understanding of networking protocols and technologies, including:
• IP Networking
• Routing
• TLS
• SSL VPN
• ESP
• IKEv2
• ActiveSync
• ICA
• RDP
• Experience designing highly available and resilient infrastructure solutions, including:
• Disaster Recovery & Resilience Models
• Strong expertise in Palo Alto Prisma Access and Zero Trust Network Access (ZTNA).
• Understanding of:
• Citrix
• SAML-based Authentication
• Conditional Access
• DNS
• DHCP
• PKI Certificate Infrastructure
• Experience working with APIs and integration tools such as Postman or Bruno.
• Strong troubleshooting and problem-solving capabilities in medium to large enterprise environments.
• Knowledge of Agile delivery methodologies and best practices.
• Experience with:
• Jira
• Confluence
• Splunk
• Fiddler
• Wireshark
• ServiceNow
• Exposure to Windows, macOS, iOS, and Android platforms.

Education & Certifications

• Agile and/or ITIL certification preferred.
• Relevant networking and cybersecurity certifications desirable.

Candidate Profile

• A hands-on technical expert with strong networking and security architecture experience.
• An excellent communicator with strong documentation skills.
• Comfortable engaging with both technical and non-technical stakeholders.
• Organised, proactive, and focused on continuous platform improvement.
• Analytical, logical, and solution oriented.
• Able to challenge existing designs and processes constructively.
• Experienced working across globally distributed teams and multiple time zones.
• Passionate about staying current with emerging cybersecurity threats and industry best practices.

Key Technologies

Palo Alto Prisma Access | ZTNA | Azure AD | Conditional Access | SAML | VPN | SSL VPN | PKI | DNS | DHCP | Citrix | Wireshark | Splunk | ServiceNow | Jira | Confluence

Expected behaviours

• Proactive
• Adaptable
• Flexible
• A team player
• Reliable

Flexibility

The key to our success is our teamwork and collaboration. We take a hybrid approach - working remotely and coming into the office depending on the business demand and collaboration required as part of the delivery process.

Equal opportunities

CACI is proud to be an equal employer. Embracing the diversity of our people, we are on a journey to build a truly inclusive work environment where no one is treated less favourably due to ethnic origin, age, gender, veteran status, religion or belief, sexual orientation, marital status, and disability or health condition, actively working to prevent discrimination.