Security Architect - Azure, Zero Trust, SASE

Precise Placements Ltd; Greater London; Hybrid; GBP 100,000 - 150,000; Full time

Job summary

Precise Placements Ltd seeks a Security Architect to own and evolve the enterprise security architecture strategy across cloud, on‑premises and hybrid environments. You will align security standards with ISO 27001, NIST and GDPR while collaborating with CTO, CISO and senior stakeholders.

You will design security solutions for Azure and hybrid networks, lead Zero Trust/SASE initiatives, and embed security into new products and projects, influencing vendors and architectural direction.

Qualifications

• Proven Security Architect experience in a law firm or in-house legal environment.
• Strong track record designing enterprise security across Azure, cloud, on-premises and hybrid.
• Practical knowledge of Zero Trust and SASE architectures.
• Experience with IAM, Firewalls, NAC and network segmentation.
• Azure networking expertise including VNETs, VNET peering and VNET gateways.
• Experience turning security strategy into implementable designs and roadmaps.
• Solid understanding of ISO 27001, NIST, GDPR and data residency requirements.
• Ability to produce architectural documentation, standards and non-functional designs.
• Confident presenting to CTO/CISO and senior stakeholders.

Responsibilities

• Own the enterprise security architecture strategy, vision and roadmap.
• Design security solutions across Azure, on-premises, hybrid and networks.
• Develop and maintain security standards, patterns and high-level designs.
• Lead the architectural approach to Zero Trust and SASE.
• Embed security into new products and technology projects.
• Evaluate technology vendors and recommend security solutions.
• Advise on IAM, network segmentation, encryption and data residency.
• Support Architecture Review Boards and design authorities.
• Translate regulatory requirements into practical controls.
• Influence secure adoption of AI and ML technologies.
• Advise senior stakeholders as a trusted security adviser.

Skills

Azure

Zero Trust

SASE

ZTNA

CASB

Identity and Access Management

Firewalls

NAC

VNETs/VNET peering

ISO 27001/NIST/GDPR

Security architecture docs

AI security considerations

Tools

Zscaler

Palo Alto Prisma

Job description

Security Architect - Azure, Zero Trust, SASE

London/Hybrid - 40% office attendance

A leading international firm is seeking an experienced Security Architect to own and develop its enterprise security architecture strategy across cloud, on-premises and hybrid environments.

Working within the Strategy and Architecture team, you will act as the firm's technical authority on cybersecurity. You will define security standards, patterns and roadmaps while ensuring security is Embedded into the design and implementation of new technologies, platforms and services.

The role will work closely with the CTO, CISO, Information Security, Risk and Compliance teams, as well as architects and senior business stakeholders across the firm.

Key responsibilities:

• Own the enterprise security architecture strategy, vision and roadmap.
• Design security solutions across Azure, on-premises, hybrid and network environments.
• Develop and maintain security architecture standards, principles, patterns and high-level designs.
• Lead the architectural approach to Zero Trust and SASE.
• Embed security requirements into new products, platforms and technology projects.
• Assess technology vendors and recommend appropriate security solutions.
• Advise on identity and access management, network segmentation, encryption, data residency and cloud security.
• Contribute to Architecture Review Boards and technical design authorities.
• Translate ISO 27001, NIST, CIS, GDPR and other regulatory requirements into practical architectural controls.
• Help define security standards governing the safe adoption of AI and machine-learning technologies.
• Act as a trusted security adviser to senior technology and business stakeholders.

Required experience:

• Proven experience working as a Security Architect within a law firm or in-house legal environment.
• Strong experience designing enterprise security solutions across Azure, cloud, on-premises and hybrid environments.
• Practical knowledge of Zero Trust and SASE architectures.
• Experience with technologies including ZTNA, CASB, identity and access management, Firewalls, NAC and network segmentation.
• Strong Azure networking knowledge, including VNETs, VNET peering and VNET gateways.
• Experience owning security designs from strategy and roadmap through to implementation.
• Strong understanding of security architecture frameworks, ISO 27001, NIST, GDPR and data-residency requirements.
• Experience producing architectural documentation, standards, security patterns and non-functional requirements.
• Confidence presenting architectural recommendations to CTO, CISO and senior stakeholder audiences.

Desirable experience:

• CISSP certification.
• TOGAF certification, with CISM or SABSA also advantageous.
• Experience with Zscaler, Palo Alto Prisma or comparable SASE platforms.
• Knowledge of AI-security risks such as data leakage, prompt injection, model integrity and supply-chain threats.
• Understanding of encryption, BYOK and hardware security modules.
• Experience with Azure PaaS services such as APIM, Azure AI Foundry and Logic Apps.

This is an opportunity to take genuine ownership of security architecture within a complex, internationally distributed organisation and influence how emerging cloud, data and AI technologies are adopted securely.