Senior Network Security Architect — Zero Trust & SASE

HCLTech; City Of London; Hybrid; GBP 30,000 - 50,000; Full time

Job summary

HCLTech in London is seeking an experienced Network Security Engineer to design, implement, and operate Zero Trust security solutions for enterprise-scale deployments. You will collaborate with multiple teams to deliver secure, scalable architectures and drive security transformation initiatives.

The role requires strong experience in SASE/SSE, ZTNA, and firewall architectures, with a focus on design reviews, PoCs, and migration planning.

Qualifications

• 8+ years of experience in Network Security Engineering and Enterprise Networking.
• Demonstrated experience designing and implementing SASE/SSE, ZTNA, network segmentation, identity-based access controls, and enterprise firewall architectures.
• Strong understanding of Zero Trust Architecture principles.
• Ability to produce technical assessments, architecture reviews, PoCs, migration strategies, and engineering documentation.
• Strong troubleshooting and root cause analysis capabilities.
• Excellent written and verbal communication skills.
• Preferred: Palo Alto or Fortinet certification.
• Preferred: CCNP Enterprise / Security.
• Preferred: CCIE Enterprise Infrastructure / Security.
• Preferred: CISSP.
• Preferred: Experience within large-scale financial services environments.
• Preferred: Knowledge of NIST Zero Trust Architecture, DORA, NIS2, and modern cybersecurity frameworks.

Responsibilities

• Partner with internal stakeholders and technology vendors to evaluate, select, and implement Zero Trust security solutions.
• Design and engineer scalable, resilient, and secure enterprise network and security architectures.
• Collaborate across Network Engineering, Security Engineering, IAM, Cloud, EUC, and Operations teams to deliver security transformation initiatives.
• Contribute to technical strategy, standards, reference architectures, and design patterns.
• Deliver solutions tailored to internal business requirements, articulate design rationale, and adapt or iterate designs when required.
• Develop High-Level Designs (HLD), Low-Level Designs (LLD), migration plans, operational procedures, and architecture documentation.
• Support vendor evaluations, Proof of Concepts (PoCs), pilot deployments, and production rollouts.
• Lead technical assessments, architecture reviews, root cause analysis, and engineering recommendations.
• Design, deploy, and operate Palo Alto, Fortinet, or Cisco NGFW platforms and their respective cloud management platforms.
• Design and implement SASE/SSE solutions for enterprise-scale deployments.
• Implement centralized security management, policy governance, logging, monitoring, and reporting using vendor ecosystems or tools such as Tufin or Algosec.
• Design and implement on-premises Zero Trust Enforcement Points (NGFW).
• Develop segmentation and micro-segmentation strategies across data centres, campuses, cloud, and branch environments.
• Define secure traffic flows and trust boundaries.
• Support migration from traditional network-centric security models to Zero Trust architectures.
• Design and engineer routers, switches, and LAN/WAN solutions.
• Work with VPN technologies, IPSec, TLS encryption, and NAC integration.
• Integrate network security solutions with Microsoft Entra ID, Active Directory, Cisco ISE / NAC platforms, EDR/XDR solutions, SIEM platforms, ServiceNow, and cloud platforms including Azure, AWS, and GCP.

Skills

Zero Trust

SASE/SSE

ZTNA

Network security

Firewall architectures

Security certifications

Root cause analysis

Tools

Palo Alto Networks

Fortinet

Microsoft Entra ID

Active Directory

NAC (ISE/NAC)

Tufin

Algosec

Job description

HCLTech in London is seeking an experienced Network Security Engineer to design, implement, and operate Zero Trust security solutions for enterprise-scale deployments. You will collaborate with multiple teams to deliver secure, scalable architectures and drive security transformation initiatives.

The role requires strong experience in SASE/SSE, ZTNA, and firewall architectures, with a focus on design reviews, PoCs, and migration planning.