Open roleExternal
Security Consultant (Zero Trust)
- london, england, United Kingdom
- Permanent·On-site
- Full time
- £100 - £150 Per Hour
Job Description
We are looking for an experienced Zero Trust Security Architect to design, implement and optimise enterprise-scale Zero Trust security architectures.
You’ll work across users, devices, applications and data, helping organisations modernise their security through cloud-first, identity-centric and SASE-based approaches . The role offers hands‑on exposure to leading Zero Trust technologies, including Zscaler, while working with cross‑functional security, networking and infrastructure teams.
Key Responsibilities
- Design and implement enterprise Zero Trust architectures aligned to NIST 800-207 and CISA principles.
- Develop secure access models using Zscaler ZIA, ZPA, ZDX and Client Connector .
- Design identity‑centric controls covering SSO, MFA, device posture and least privilege .
- Deploy and optimise technologies including DLP, CASB, FWaaS, Cloud Firewall and App Connectors .
- Integrate Zero Trust platforms with Entra ID, Okta, SIEM/SOAR and endpoint security platforms .
- Support migration from legacy VPN, proxy and firewall technologies to modern Zero Trust models.
- Conduct POCs, technical validation, threat modelling and security gap assessments.
- Troubleshoot and optimise Zero Trust deployments, telemetry and access controls.
- Provide technical guidance, mentorship and architectural governance.
Key Requirements
- 5–10+ years’ experience in cybersecurity architecture or senior engineering roles.
- Strong hands‑on experience with Zscaler ZIA, ZPA, ZDX and Client Connector or similar Zero Trust technologies.
- Experience with App Connectors, Cloud Firewall, Cloud Sandbox, DLP and CASB .
- Strong understanding of Zero Trust, NIST 800-207, SASE and SSE .
- Knowledge of IAM, Entra ID/Azure AD, Okta or Ping .
- Understanding of SD‑WAN, DNS security, routing and endpoint security/EDR/XDR .
- Strong communication and stakeholder management skills.
- Ability to explain complex security concepts to technical and non‑technical audiences.
- Experience working in large, matrixed enterprise environments.
Desirable Certifications
- Zscaler certifications such as ZCCA-IA, ZCCA-PA or ZCCP .
- CISSP, CCSP or equivalent.
- Azure, AWS or GCP cloud certifications.
- SASE/SSE certifications such as Palo Alto Prisma or Netskope .
- CCNA or equivalent networking certification.