Zero Trust Security Architect

Accenture; Greater London; Hybrid; GBP 50,000 - 75,000; Full time

Benefits offered by this job

30 days vacation

Private medical insurance

3 extra days of leave for charitable/∂

Job summary

Accenture in London is seeking a Senior Security Architect to lead Zero Trust design and implementation across users, devices, apps, and data. You will establish secure patterns using ZIA, ZPA, and ZDX, and create enterprise blueprints aligned with NIST 800-207 and SASE frameworks.

The role requires strong IAM expertise (Azure AD, Okta, Ping) and experience in large, matrixed enterprises. Hybrid work model with travel to client sites is available, along with a competitive benefits package.

Qualifications

• Extensive experience in cybersecurity architecture or senior engineering roles.
• Strong hands-on expertise with Zscaler ZIA, ZPA, ZDX or similar.
• Hands-on experience with Zscaler Client Connector.
• Experience with App Connectors, Cloud Firewall, Cloud Sandbox, DLP, and CASB.
• Deep understanding of Zero Trust frameworks such as NIST 800-207, SASE, and SSE.
• Strong knowledge of identity and access management, including Azure AD, Okta, and Ping.
• Understanding of modern network design, including SD-WAN, DNS security, and routing fundamentals.
• Knowledge of endpoint security, including EDR/XDR and device posture assessment.
• Strong communication and stakeholder management skills.
• Ability to translate complex security concepts into business-friendly language.
• Experience working within large, matrixed enterprises.
• Proven ability to lead cross-functional initiatives.
• Zscaler certifications such as ZCCA-IA, ZCCA-PA, or ZCCP are desirable.
• Security credentials such as CISSP or CCSP are desirable.
• Cloud certifications in Azure, AWS, or GCP are highly desirable.
• Certifications from leading SASE/SSE vendors such as Palo Alto Prisma or Netskope are advantageous.
• Network certification such as CCNA or equivalent is advantageous.
• Willingness to undergo a Security Clearance process, requiring 5+ years of UK address history at the point of application.

Responsibilities

• Lead the design and implementation of Zero Trust architectures for enterprise environments covering users, devices, applications, and data.
• Establish secure access patterns using cloud-based security and zero-trust platforms such as Zscaler ZIA, ZPA, and ZDX.
• Create enterprise-wide security blueprints and reference architectures aligned with Zero Trust principles such as NIST 800-207 and CISA.
• Design scalable identity-centric security controls using SSO, MFA, device posture, and least-privilege access models.
• Collaborate with networking teams to modernize WAN and remote access using cloud security and SASE frameworks.
• Deploy, configure, and optimise Zero Trust technologies.
• Create and fine-tune security policies, including URL filtering, DLP, CASB, and FWaaS.
• Manage application segmentation and connector deployment.
• Configure and roll out Zero Trust Client Connector.
• Integrate Zero Trust solutions with identity providers, SIEM/SOAR systems, and endpoint platforms such as CrowdStrike.
• Collaborate with infrastructure teams to migrate legacy VPN, proxy, and firewall solutions to cloud-native Zero Trust models.
• Conduct proof-of-concept evaluations and technical validation sessions.
• Drive the organisations Zero Trust strategy and security roadmap.
• Provide architectural governance and ensure security best practices across projects.
• Conduct threat modelling, gap assessments, and risk evaluations for critical applications and network paths.
• Advocate for the adoption of modern security frameworks and secure-by-design principles.
• Troubleshoot Zero Trust deployment issues, performance concerns, and identity-related access failures.
• Monitor and tune telemetry, logs, and analytics to maintain optimal operational performance.
• Provide technical mentorship and training to internal security and networking teams.

Skills

Cybersecurity architecture

Zscaler ZIA

Zscaler ZPA

Zscaler ZDX

Zscaler Client Connector

Zero Trust

Identity & access management

SASE/SSE

Communication

Stakeholder management

Security clearance readiness

Education

CISSP or CCSP

CCNA

Tools

Zscaler Suite

Azure AD

Okta

CrowdStrike

SIEM/SOAR

Job description

Salary: £50,000 - 75,000 per year

Requirements:

• Extensive experience in cybersecurity architecture or senior engineering roles.
• Strong hands-on expertise with Zscaler ZIA, ZPA, ZDX or similar.
• Hands-on experience with Zscaler Client Connector.
• Experience with App Connectors, Cloud Firewall, Cloud Sandbox, DLP, and CASB.
• Deep understanding of Zero Trust frameworks such as NIST 800-207, SASE, and SSE.
• Strong knowledge of identity and access management, including Azure AD, Okta, and Ping.
• Understanding of modern network design, including SD-WAN, DNS security, and routing fundamentals.
• Knowledge of endpoint security, including EDR/XDR and device posture assessment.
• Strong communication and stakeholder management skills.
• Ability to translate complex security concepts into business-friendly language.
• Experience working within large, matrixed enterprises.
• Proven ability to lead cross-functional initiatives.
• Zscaler certifications such as ZCCA-IA, ZCCA-PA, or ZCCP are desirable.
• Security credentials such as CISSP or CCSP are desirable.
• Cloud certifications in Azure, AWS, or GCP are highly desirable.
• Certifications from leading SASE/SSE vendors such as Palo Alto Prisma or Netskope are advantageous.
• Network certification such as CCNA or equivalent is advantageous.
• Willingness to undergo a Security Clearance process, requiring 5+ years of UK address history at the point of application.

Responsibilities:

• Lead the design and implementation of Zero Trust architectures for enterprise environments covering users, devices, applications, and data.
• Establish secure access patterns using cloud-based security and zero-trust platforms such as Zscaler ZIA, ZPA, and ZDX.
• Create enterprise-wide security blueprints and reference architectures aligned with Zero Trust principles such as NIST 800-207 and CISA.
• Design scalable identity-centric security controls using SSO, MFA, device posture, and least-privilege access models.
• Collaborate with networking teams to modernize WAN and remote access using cloud security and SASE frameworks.
• Deploy, configure, and optimise Zero Trust technologies.
• Create and fine-tune security policies, including URL filtering, DLP, CASB, and FWaaS.
• Manage application segmentation and connector deployment.
• Configure and roll out Zero Trust Client Connector.
• Integrate Zero Trust solutions with identity providers, SIEM/SOAR systems, and endpoint platforms such as CrowdStrike.
• Collaborate with infrastructure teams to migrate legacy VPN, proxy, and firewall solutions to cloud-native Zero Trust models.
• Conduct proof-of-concept evaluations and technical validation sessions.
• Drive the organisations Zero Trust strategy and security roadmap.
• Provide architectural governance and ensure security best practices across projects.
• Conduct threat modelling, gap assessments, and risk evaluations for critical applications and network paths.
• Advocate for the adoption of modern security frameworks and secure-by-design principles.
• Troubleshoot Zero Trust deployment issues, performance concerns, and identity-related access failures.
• Monitor and tune telemetry, logs, and analytics to maintain optimal operational performance.
• Provide technical mentorship and training to internal security and networking teams.

Technologies:

• AWS
• Azure
• Cloud
• Firewall
• GCP
• Support
• Network
• Prisma
• Security
• VPN
• AI
• Architect
• Fine-tuning

More:

We are Accenture, a leading global professional services company with a broad range of services across strategy and consulting, interactive, technology, and operations. We help the worlds leading businesses, governments, and other organizations build their digital core, optimize operations, accelerate revenue growth, and enhance citizen services. You will join our London-based, hybrid team and have the flexibility to travel to client sites where required. We offer a competitive basic salary and an extensive benefits package that includes 30 days vacation per year, private medical insurance, and 3 extra days of leave per year for charitable work of your choice. We are committed to inclusion, diversity, and innovation, and we support the whole person through our culture, global network, and shared commitment to creating value for clients, communities, and each other.

last updated 37 week of 2026