Security Consultant (Zero Trust)

Anson McCade; Greater London; On-site; GBP 100,000 - 150,000; Full time

Job summary

Anson McCade is seeking an experienced Zero Trust Security Architect to design, implement and optimise enterprise-scale security architectures in a London-based role. You will work across users, devices, applications and data to modernise security via cloud-first, identity-centric and SSE/SASE approaches.

Hands-on with leading technologies like Zscaler is expected. Responsibilities include designing enterprise Zero Trust architectures, implementing secure access models, integrating IAM and

Qualifications

• 5–10+ years’ experience in cybersecurity architecture or senior engineering roles.
• Hands-on experience with Zscaler ZIA, ZPA, ZDX and Client Connector or similar.
• Experience with App Connectors, Cloud Firewall, Cloud Sandbox, DLP and CASB.
• Strong understanding of Zero Trust, NIST 800-207, SASE and SSE.
• Knowledge of IAM, Entra ID/Azure AD, Okta or Ping.
• Understanding of SD‑WAN, DNS security, routing and endpoint security/EDR/XDR.
• Strong communication and stakeholder management skills.
• Ability to explain complex security concepts to technical and non-technical audiences.
• Experience in large, matrixed enterprise environments.

Responsibilities

• Design and implement enterprise Zero Trust architectures aligned to NIST 800-207 and CISA principles.
• Develop secure access models using Zscaler ZIA, ZPA, ZDX and Client Connector.
• Design identity-centric controls covering SSO, MFA, device posture and least privilege.
• Deploy and optimise technologies including DLP, CASB, FWaaS, Cloud Firewall and App Connectors.
• Integrate Zero Trust platforms with Entra ID, Okta, SIEM/SOAR and endpoint security platforms.
• Support migration from legacy VPN, proxy and firewall technologies to modern Zero Trust models.
• Conduct POCs, technical validation, threat modelling and security gap assessments.
• Troubleshoot and optimise Zero Trust deployments, telemetry and access controls.
• Provide technical guidance, mentorship and architectural governance.

Skills

Zero Trust security architecture

Zscaler ZIA

Zscaler ZPA

Zscaler ZDX

Client Connector

App Connectors

Cloud Firewall

Cloud Sandbox

DLP

CASB

NIST 800-207

SASE/SSE

IAM and Entra ID/Azure AD

Okta or Ping

SD-WAN & DNS security

Endpoint security/EDR/XDR

Communication & stakeholder mgmt

Tools

Zscaler ZIA/ZPA/ZDX/Client Connector

Job description

We are looking for an experienced Zero Trust Security Architect to design, implement and optimise enterprise-scale Zero Trust security architectures.

You’ll work across users, devices, applications and data, helping organisations modernise their security through cloud-first, identity-centric and SASE-based approaches. The role offers hands‑on exposure to leading Zero Trust technologies, including Zscaler, while working with cross‑functional security, networking and infrastructure teams.

Key Responsibilities

• Design and implement enterprise Zero Trust architectures aligned to NIST 800-207 and CISA principles.
• Develop secure access models using Zscaler ZIA, ZPA, ZDX and Client Connector.
• Design identity‑centric controls covering SSO, MFA, device posture and least privilege.
• Deploy and optimise technologies including DLP, CASB, FWaaS, Cloud Firewall and App Connectors.
• Integrate Zero Trust platforms with Entra ID, Okta, SIEM/SOAR and endpoint security platforms.
• Support migration from legacy VPN, proxy and firewall technologies to modern Zero Trust models.
• Conduct POCs, technical validation, threat modelling and security gap assessments.
• Troubleshoot and optimise Zero Trust deployments, telemetry and access controls.
• Provide technical guidance, mentorship and architectural governance.

Key Requirements

• 5–10+ years’ experience in cybersecurity architecture or senior engineering roles.
• Strong hands‑on experience with Zscaler ZIA, ZPA, ZDX and Client Connector or similar Zero Trust technologies.
• Experience with App Connectors, Cloud Firewall, Cloud Sandbox, DLP and CASB.
• Strong understanding of Zero Trust, NIST 800-207, SASE and SSE.
• Knowledge of IAM, Entra ID/Azure AD, Okta or Ping.
• Understanding of SD‑WAN, DNS security, routing and endpoint security/EDR/XDR.
• Strong communication and stakeholder management skills.
• Ability to explain complex security concepts to technical and non‑technical audiences.
• Experience working in large, matrixed enterprise environments.

Desirable Certifications

• Zscaler certifications such as ZCCA-IA, ZCCA-PA or ZCCP.
• CISSP, CCSP or equivalent.
• Azure, AWS or GCP cloud certifications.
• SASE/SSE certifications such as Palo Alto Prisma or Netskope.
• CCNA or equivalent networking certification.