Zscaler Architect

NineTech; United Kingdom; On-site; GBP 90,000 - 120,000; Full time

Job summary

NineTech is seeking two Senior Security Consultants to drive security architecture for a major UK private banking transformation. You will embed security across platform design, development and deployment, working with security, architecture and engineering teams to enforce Zero Trust and secure DevSecOps practices.

Key focus areas include Zscaler implementation (ZIA/ZPA/ZDX), identity-driven access, cloud and on‑prem security controls, and regulatory data protection alignment within a major UK

Qualifications

• Extensive enterprise security architecture experience.
• Broad security knowledge across cloud, on-prem, apps and mobile.
• Experience designing secure platforms for large transformations.
• Identify weaknesses and propose secure alternatives.
• Strong Zero Trust and security-by-design understanding.
• Hands-on with Zscaler platform in enterprise deployments.
• Experience integrating Zscaler with identity providers.

Responsibilities

• Provide security architecture and application security for the new private banking platform.
• Define secure architecture patterns across cloud and on-prem environments.
• Design and implement Zero Trust principles and access controls.
• Advise on Zscaler integration with cloud environments and enterprise apps.
• Support adoption of ZTNA and embedding security in SDLC.
• Review architectures and challenge outdated patterns.
• Provide input on DevSecOps, API security and secure coding practices.

Skills

Security architecture

Zero Trust architecture

Cloud security

DevSecOps

API security

Security by design

Zscaler platform

Identity and access management

Stakeholder communication

Tools

Zscaler (ZIA, ZPA, ZDX)

Microsoft Entra ID / AAD

Active Directory / SSO

AWS / Azure / GCP

SIEM / SOAR / EDR

Kubernetes

API gateways

Job description

Job Title: Senior Security Consultant – Security Architecture & Zscaler

Programme: Private Banking Technology Transformation

Role Overview

A major UK bank is seeking two experienced Senior Security Consultants to support its Private Banking transformation programme.

The programme involves building a new private banking platform essentially from the ground up, using a modern technology stack and architecture. The successful consultants will be dedicated to the programme, working closely with the bank's existing security, architecture and engineering teams to ensure that security is embedded throughout the platform design, development and implementation lifecycle.

Key Responsibilities

• Provide security architecture and application security expertise across the new private banking platform.
• Define and influence secure architecture patterns across cloud, on-premises infrastructure, applications, mobile, web and streaming technologies.
• Design and implement Zero Trust security principles, including identity-based access controls and least-privilege access.
• Provide technical expertise in Zscaler security solutions, including Zscaler Internet Access (ZIA), Zscaler Private Access (ZPA) and Zscaler Digital Experience (ZDX).
• Advise on Zscaler integration with cloud environments, enterprise applications, user endpoints and existing security infrastructure.
• Support the adoption of Zero Trust Network Access (ZTNA), replacing traditional network-centric access approaches where appropriate.
• Work alongside architecture, engineering, development and security teams to embed security throughout the software development lifecycle.
• Review solution architectures, identify security weaknesses and challenge poor or outdated architectural patterns.
• Recommend modern security controls and architectural alternatives aligned with enterprise security strategy.
• Provide security input into application development, API security, source-code management and DevSecOps practices.
• Support cloud security architecture across public and private cloud environments.
• Ensure security controls address regulatory, operational resilience and data protection requirements relevant to a major UK banking environment.
• Communicate complex security concepts and recommendations effectively to both technical and business stakeholders.

Essential Skills and Experience

Security Architecture

• Extensive experience in enterprise security architecture and security design.
• Broad security knowledge across cloud, on-premises infrastructure, applications, mobile and web technologies.
• Experience designing secure technology platforms and large-scale transformation programmes.
• Ability to identify architectural weaknesses and recommend modern, secure alternatives.
• Strong understanding of Zero Trust architecture and security-by-design principles.
• Hands-on experience with the Zscaler security platform and enterprise implementations.
• Strong knowledge of Zscaler Internet Access (ZIA), including secure web gateway, cloud firewall, URL filtering and threat protection.
• Strong knowledge of Zscaler Private Access (ZPA), including Zero Trust Network Access (ZTNA), application segmentation and secure private application connectivity.
• Understanding of Zscaler Digital Experience (ZDX) and end-user experience monitoring.
• Experience integrating Zscaler with enterprise identity providers, such as Microsoft Entra ID, Active Directory and SSO solutions.
• Knowledge of Zscaler deployment architectures, traffic forwarding, policy management and security controls.
• Experience integrating Zscaler with cloud platforms, enterprise networks and existing security tooling.
• Understanding of how Zscaler supports the transition from traditional VPN and perimeter-based security to a Zero Trust model.

Cloud and Application Security

• Strong experience in at least one of the following areas:
• Cloud security architecture and engineering.
• Application development and application security.
• Source-code management and DevSecOps.
• Knowledge of cloud security controls, IAM, encryption, network segmentation and workload protection.
• Understanding of secure SDLC, code repositories, CI/CD pipelines and application vulnerability management.
• Experience with API security, web application security and modern application architectures.

Infrastructure and Emerging Technologies

• Understanding of on-premises infrastructure and hybrid cloud environments.
• Knowledge of streaming platforms and associated security considerations.
• Experience securing mobile applications, web applications, web servers and APIs.
• Understanding of modern infrastructure, connectivity and identity security patterns.

Business and Stakeholder Skills

• Strong business awareness and ability to understand the security implications of business and technology decisions.
• Excellent communication and stakeholder management skills.
• Ability to engage confidently with senior architects, engineers, security leaders and business stakeholders.
• Experience working within complex enterprise environments, ideally financial services or banking.
• Experience working within UK financial services or private banking.
• Knowledge of UK financial services regulatory and security requirements, including FCA, PRA, operational resilience and relevant data protection obligations.
• Zscaler implementation, migration or architecture certification.
• Experience with Microsoft Azure, AWS or Google Cloud Platform.
• Familiarity with SIEM, SOAR, EDR and identity security technologies.
• Experience with DevSecOps, container security, Kubernetes and API gateways.
• Knowledge of security frameworks such as NIST CSF, ISO 27001 and SABSA.