Remote Access Architect

Job Title: Remote Access Architect
Location: London (Hybrid)
Contract: 3 months

Role Purpose
The Remote Access Architect will provide strategic oversight and governance for the design, standards, and technical components of a unified Remote Access solution across M&S. This role ensures that remote access capabilities align with the company's strategic vision, security and compliance requirements, while delivering a seamless and secure colleague experience.

The Architect will act as an independent voice, representing the M&S perspective across multiple teams and technologies, ensuring cohesion and consistency in the end-to-end service.

Key Responsibilities

• Define and govern patterns, standards, and architecture principles for the Remote Access solution.
• Provide strategic oversight across all technical components, ensuring integration and alignment:
• Zscaler Private Access (ZPA - Networks team)
• Zscaler Browser Portal Access (Networks team)
• Azure Virtual Desktop (AVD hosting - Cloud Hosting team; AVD endpoint - Device & Endpoint Management team)
• AD/Entra ID (Identity & Access Management team)
• CyberArk (Privileged Access Management - Identity & Access Management team)
• Collaborate closely with security and other technical leads to ensure compliance with M&S security standards.
• Ensure the solution delivers a positive colleague experience across diverse business requirements and global coverage.
• Ensure the solution incorporates the need for Warehouse, Stores, and non-production environments (CATE)
• Act as a trusted advisor to the Identity & Access Management team, who will own the end-to-end service.
• Provide independent assessment and recommendations to ensure the solution remains future-proof, scalable, and secure.
• Establish a holistic view of a target solution and provide technical assurance this meets the current and future needs of M&S
• Identify and align key dependencies with the Network and other teams. Design Authority Submissions - Remote Access
  As part of the governance framework, the Remote Access Architect will contribute to and oversee Design
• Authority submissions. These submissions ensure that all remote access components are aligned with M&S standards, security requirements, and strategic direction.
  Summary of Submissions
  • Zscaler Private Access (ZPA) - secure, policy-driven access to internal applications; focus on scalability and compliance.
  • Zscaler Browser Portal Access - browser-based access for external partners; focus on usability and onboarding.
  • Azure Virtual Desktop (AVD) - hosting and endpoint management; focus on performance in warehouse/store environments.
  • AD/Entra ID - identity federation and conditional access; focus on seamless integration and compliance.
  • CyberArk (PAM) - privileged account management; focus on segregation of duties and auditability.
  
  Governance Outcomes
  • Submissions reviewed and approved by the Design Authority to ensure consistency across all components.
  • Architect provides independent M&S oversight, ensuring submissions balance security, compliance, and colleague experience.
  • Focus areas include Warehouse, Stores, and non-production environments, where remote access requirements are most critical.Skills & Experience
• • Proven experience as an Architect in Remote Access, Identity & Access Management, or related domains.
  • Strong knowledge of enterprise remote access technologies, including Zscaler, Azure Virtual Desktop, AD/Entra ID, and CyberArk.
  • Expertise in security governance, compliance frameworks, and architectural standards.
  • Ability to balance technical rigor with user experience, ensuring solutions are secure yet intuitive.
  • Excellent stakeholder management skills, with experience working across multi-disciplinary teams.
  • Strong communication and influencing skills, able to represent an independent strategic vie