Zero Trust Architect: Cloud-First & Identity-Centric

Anson McCade; Greater London; On-site; GBP 100,000 - 150,000; Full time

Job summary

Anson McCade is seeking an experienced Zero Trust Security Architect to design, implement and optimise enterprise-scale security architectures in a London-based role. You will work across users, devices, applications and data to modernise security via cloud-first, identity-centric and SSE/SASE approaches.

Hands-on with leading technologies like Zscaler is expected. Responsibilities include designing enterprise Zero Trust architectures, implementing secure access models, integrating IAM and

Qualifications

• 5–10+ years’ experience in cybersecurity architecture or senior engineering roles.
• Hands-on experience with Zscaler ZIA, ZPA, ZDX and Client Connector or similar.
• Experience with App Connectors, Cloud Firewall, Cloud Sandbox, DLP and CASB.
• Strong understanding of Zero Trust, NIST 800-207, SASE and SSE.
• Knowledge of IAM, Entra ID/Azure AD, Okta or Ping.
• Understanding of SD‑WAN, DNS security, routing and endpoint security/EDR/XDR.
• Strong communication and stakeholder management skills.
• Ability to explain complex security concepts to technical and non-technical audiences.
• Experience in large, matrixed enterprise environments.

Responsibilities

• Design and implement enterprise Zero Trust architectures aligned to NIST 800-207 and CISA principles.
• Develop secure access models using Zscaler ZIA, ZPA, ZDX and Client Connector.
• Design identity-centric controls covering SSO, MFA, device posture and least privilege.
• Deploy and optimise technologies including DLP, CASB, FWaaS, Cloud Firewall and App Connectors.
• Integrate Zero Trust platforms with Entra ID, Okta, SIEM/SOAR and endpoint security platforms.
• Support migration from legacy VPN, proxy and firewall technologies to modern Zero Trust models.
• Conduct POCs, technical validation, threat modelling and security gap assessments.
• Troubleshoot and optimise Zero Trust deployments, telemetry and access controls.
• Provide technical guidance, mentorship and architectural governance.

Skills

Zero Trust security architecture

Zscaler ZIA

Zscaler ZPA

Zscaler ZDX

Client Connector

App Connectors

Cloud Firewall

Cloud Sandbox

DLP

CASB

NIST 800-207

SASE/SSE

IAM and Entra ID/Azure AD

Okta or Ping

SD-WAN & DNS security

Endpoint security/EDR/XDR

Communication & stakeholder mgmt

Tools

Zscaler ZIA/ZPA/ZDX/Client Connector

Job description

Anson McCade is seeking an experienced Zero Trust Security Architect to design, implement and optimise enterprise-scale security architectures in a London-based role. You will work across users, devices, applications and data to modernise security via cloud-first, identity-centric and SSE/SASE approaches.

Hands-on with leading technologies like Zscaler is expected. Responsibilities include designing enterprise Zero Trust architectures, implementing secure access models, integrating IAM and