Zero Trust Architect

Anson McCade; Greater London; On-site; GBP 90,000 - 120,000; Full time

Benefits offered by this job

25 days' annual leave

Private medical insurance

Job summary

Anson McCade is seeking an experienced Zero Trust Security Architect to design, deliver and optimise enterprise-scale Zero Trust architectures for major clients in London. You will work hands-on with platforms like Zscaler and collaborate with cross-functional teams to shape secure architectures and roadmaps, supporting secure transformation across networks, apps, and endpoints.

This client-facing role combines architecture, engineering and security leadership, offering opportunities to deepen

Qualifications

• 5–10+ years in cyber security architecture or senior engineering roles.
• Hands-on with Zscaler ZIA, ZPA and ZDX (or similar).
• Deep understanding of Zero Trust frameworks (NIST SP 800-207, SASE, SSE).
• Experience with Identity and access management (Microsoft Entra ID / Azure AD, Okta, Ping).
• Endpoint security (EDR/XDR, device posture).
• Cloud certifications in Azure, AWS or GCP (desirable).
• Certifications from leading SASE/SSE vendors (e.g., Palo Alto Prisma, Netskope).
• Strong communication and stakeholder management.
• Proven ability to lead cross-functional initiatives.
• Networking certification such as CCNA or equivalent.

Responsibilities

• Lead the design and implementation of Zero Trust architectures for enterprises, covering users, devices, applications and data.
• Establish secure access patterns using cloud-based security and Zero Trust platforms (e.g. Zscaler ZIA, ZPA, ZDX).
• Create enterprise-wide security blueprints and reference architectures aligned with Zero Trust principles (NIST SP 800-207, CISA).
• Design scalable, identity-centric security controls using SSO, MFA and least-privilege models.
• Migrate legacy VPN, proxy and firewall solutions to cloud-native Zero Trust models.
• Deploy, configure and optimise Zero Trust technologies, including policy creation and tuning.
• Run PoCs and technical validation sessions.

Skills

Zscaler ZIA/ZPA

IAM (Entra/Azure/Okta)

EDR/XDR

Zero Trust

Cloud security

SASE

CISSP/CCSP

Leadership

Cross-functional

Networking basics

Tools

App Connectors

CrowdStrike

Job description

Location: London, with travel to client sites as required

A leading global consultancy is looking for an experienced Zero Trust Security Architect to design, deliver and optimise enterprise-scale Zero Trust security architectures for major clients.

You'll work hands-on with leading platforms such as Zscaler and alongside cross-functional teams to shape secure architectures, define strategic roadmaps and support secure transformation across networks, applications and endpoints. This is a client-facing role that combines architecture, hands-on engineering and security leadership, with the chance to deepen your expertise in modern identity-centric, cloud-first security models.

Key responsibilities

Architecture and design

• Lead the design and implementation of Zero Trust architectures for enterprise environments, covering users, devices, applications and data
• Establish secure access patterns using cloud-based security and Zero Trust platforms (e.g. Zscaler ZIA, ZPA, ZDX)
• Create enterprise-wide security blueprints and reference architectures aligned with Zero Trust principles (NIST SP 800-207, CISA)
• Design scalable, identity-centric security controls using SSO, MFA, device posture and least-privilege access models
• Work with networking teams to modernise WAN and remote access using cloud security and SASE frameworks

Implementation and engineering

• Deploy, configure and optimise Zero Trust technologies, including:
• Policy creation and tuning (URL filtering, DLP, CASB, FWaaS)
• App segmentation and connector deployment
• Client Connector configuration and rollout
• Integrate Zero Trust solutions with identity providers (Microsoft Entra ID, Okta), SIEM/SOAR platforms and endpoint tools such as CrowdStrike
• Partner with infrastructure teams to migrate legacy VPN, proxy and firewall solutions to cloud-native Zero Trust models
• Run proof-of-concept evaluations and technical validation sessions

Essential skills and experience

Technical

• 5–10+ years' experience in cyber security architecture or senior engineering roles
• Strong hands-on expertise with:
• Zscaler ZIA, ZPA and ZDX (or similar)
• App Connectors, Cloud Firewall, Cloud Sandbox, DLP and CASB
• Deep understanding of:
• Zero Trust frameworks (NIST SP 800-207, SASE, SSE)
• Identity and access management (Microsoft Entra ID / Azure AD, Okta, Ping)
• Endpoint security (EDR/XDR, device posture assessment)
• Strong communication and stakeholder management
• Ability to translate complex security concepts into business-friendly language
• Experience working within large, matrixed enterprises
• Proven ability to lead cross-functional initiatives
• Zscaler certifications (ZCCA-IA, ZCCA-PA, ZCCP)
• CISSP, CCSP or similar security credentials
• Cloud certifications in Azure, AWS or GCP (highly desirable)
• Certifications from other leading SASE/SSE vendors, such as Palo Alto Networks Prisma or Netskope
• Networking certification such as CCNA or equivalent

What's on offer

• 25 days' annual leave
• Private medical insurance
• Hands-on experience with leading Zero Trust platforms on large-scale enterprise transformation programmes