Zero Trust Architect
Sanderson are working with a consulting client who are looking to grow their Zero Trust capability. The client is seeking an Architect to come in and implement and optimise Zero Trust security architectures.
Your responsibilities:
Architecture & Design
- Leading the design and implementation of Zero Trust architectures for enterprise environments, covering users, devices, applications, and data.
- Establishing secure access patterns using cloud-based security and zero-trust platforms
- Creating enterprise-wide security blueprints and reference architectures aligned with Zero Trust principles
- Designing scalable identity-centric security controls using SSO, MFA, device posture, and least-privilege access models.
- Collaborating with networking teams to modernize WAN and remote access using cloud security and SASE frameworks.
Implementation & Hands-On Engineering
- Deploying, configuring, and optimising Zero Trust technologies, including:
- Policy creation and fine-tuning
- Managing App segmentation and connector deployment.
- Zero Trust Client Connector configuration and rollout.
- Integrating Zero Trust solutions with identity providers, SIEM/SOAR systems, and endpoint platforms.
- Collaborating with infrastructure teams to migrate legacy VPN, proxy, and firewall solutions to cloud native Zero Trust models.
- Conducting proof-of-concept evaluations and technical validation sessions.
Security Leadership & Strategy
- Driving the organization's Zero Trust strategy and security roadmap.
- Providing architectural governance and ensuring security best practices across projects.
- Conducting threat modelling, gap assessments, and risk evaluations for critical applications and network paths.
- Advocate for the adoption of modern security frameworks and secure-by-design principles.
Operations & Optimization
- Troubleshooting Zero Trust deployment issues, performance concerns, and identity-related access failures.
- Monitoring and tuning telemetry, logs, and analytics to maintain optimal operational performance.
- Providing technical mentorship and training to internal security and networking teams.
The following skills and experience are essential for this role:
Technical Expertise
- 5-10+ years of experience in cybersecurity architecture or senior engineering roles.
- Strong hands-on expertise with:
- Zscaler ZIA, ZPA, ZDX or similar
- Zscaler Client Connector
- App Connectors, Cloud Firewall, Cloud Sandbox, DLP, CASB
- Deep understanding of:
- Zero Trust frameworks
- Identity and access management
- Modern network design
- Endpoint security
This role will require you to be willing and eligible to undergo UK security clearance.
If you're interested in the above, apply or reach out to