Senior Zero Trust Security Architect - Azure, AWS, NIST 800-207

AxiaMetrics LLP; Coventry; On-site; GBP 120,000 - 180,000; Full time

Job summary

AxiaMetrics LLP is recruiting a Senior Zero Trust Security Architect to own the enterprise strategy across Azure, AWS, hybrid and on-prem environments. You will be a trusted advisor to CIO/CISO and shape security-by-design into major initiatives.

The role requires leadership of enterprise ZT transformation, secure cloud landing zones, IAM architectures and security monitoring across multi-cloud platforms.

Qualifications

• Experience in defining enterprise security architecture strategies and roadmaps.
• Strong knowledge of Azure security services and AWS security services.
• Proven ability to lead large security transformation programmes across multi-cloud and on-prem environments.
• Expertise in identity governance, PAM, SSO, MFA and conditional access concepts.

Responsibilities

• Define and own the enterprise Zero Trust security strategy and roadmap.
• Provide architectural leadership for cloud security transformation across Azure and AWS.
• Lead security architecture governance for major technology programmes.

Skills

Zero Trust Architecture

Azure Security

AWS Security

Identity Security

ZTNA/SASE

CWPP/Defender

IaC Security

Job description

AxiaMetrics is recruiting a Senior Zero Trust Security Architect for an enterprise client. This is a senior leadership role: you will own the Zero Trust strategy and architecture vision across Azure, AWS, hybrid and on-premises environments, act as a trusted advisor to the CIO, CISO and Enterprise Architecture, and make sure security-by-design is built into every major technology initiative.

KEY SKILLS

• Zero Trust Architecture (NIST 800-207): strategy, roadmap, reference architectures and governance
• Azure security: Entra ID, Conditional Access, PIM, Defender for Cloud, Sentinel, Azure Policy, Key Vault, AKS
• AWS security: IAM, Organizations, Security Hub, GuardDuty, Inspector, KMS, WAF, Shield, EKS
• Identity security: IAM, PAM (CyberArk, BeyondTrust), IGA (SailPoint, Saviynt), RBAC/ABAC, JIT/JEA
• ZTNA, SASE, SDP and micro-segmentation
• CSPM and CWPP (Prisma Cloud, Wiz), Defender XDR, CrowdStrike Falcon, Splunk
• DevSecOps and secure IaC (Terraform, Bicep, CloudFormation)

THE ROLE

• Define and own the enterprise Zero Trust security strategy and roadmap
• Provide architectural leadership for cloud security transformation across Azure and AWS
• Act as lead security authority on major technology and digital transformation programmes
• Architect secure cloud landing zones and governance frameworks, and security architectures for cloud-native, container, microservices, data and hybrid platforms
• Design enterprise IAM architectures, including PIM/PAM, SSO, MFA, Conditional Access and identity governance
• Lead the design of Zero Trust network architectures to reduce attack surface and lateral movement risk
• Provide architectural direction for security monitoring, threat detection, incident response and cyber resilience
• Chair architecture review boards and lead security risk assessments and design assurance
• Oversee compliance with ISO 27001, NIST CSF, NIST 800-53, NIST 800-207, CIS Controls, GDPR and Cyber Essentials Plus
• Present security posture, risk and investment cases to executive and board-level stakeholders
• Lead and mentor security architects and engineers

REQUIRED EXPERIENCE

• 12-15+ years in information and cyber security
• 7+ years in security architecture leadership roles
• Proven leadership of enterprise-scale Zero Trust transformation programmes
• Extensive experience securing Azure and AWS environments in large enterprises
• Track record of advising executives, architecture boards and governance forums
• Experience leading globally distributed teams and large transformation programmes
• Strong commercial awareness and influencing, communication and consulting skills

DESIRABLE CERTIFICATIONS

CISSP, CCSP, CISM, SC-100, AZ-305, AWS Security Specialty, AWS Solutions Architect Professional, SABSA, TOGAF, CZTP