101 to 125 of 619 Zero Trust Jobs in the UK

service, application and machine identities; identity governance, modern authentication, access lifecycle management, conditional access, PAM/PIM, federation, SSO, MFA, identity threat detection, and zero trust identity control design. AI & Blockchain Architecture: Secure architecture and governance for AI, machine learning, generative AI, agentic solutions, distributed ledger technologies … SaaS controls, and cloud governance. Security Architecture Advisory Services: Strategic and technical guidance across domains, aligning security architecture with business objectives. Focus areas include zero trust principles, risk-based decision-making, and security integration into digital transformation initiatives. Required Experience & Skills Experience: 10+ years of overall experience ...

security architecture across identity, endpoints, networks, cloud, SaaS, data, applications and integration platforms. Design and implement modern security controls, with a strong focus on Zero Trust, secure-by-design principles and automation. Lead security architecture reviews and threat modelling for major projects, new products, high-risk integrations … security controls in a Microsoft-centric environment, including Microsoft 365, Entra ID, Defender XDR, Sentinel, Azure and Microsoft Purview. Strong knowledge of identity security, Zero Trust, cloud security, data security, endpoint security, network security, application security, API security and secure software development. Experience of security architecture review, threat ...

network security architecture for NESO, ensuring robust protection across on-premises, cloud, and hybrid environments. Design, document, and govern secure network segmentation strategies, including Zero Trust models, next-generation firewall frameworks, and secure connectivity solutions such as Direct Connect, and Transit Gateway currently delivered by ZScaler. Help Develop … scale. Expert knowledge of enterprise LAN, WAN, SD‐WAN, Data Centre, Internet Edge, Cloud Networking and Network Security architectures. Deep understanding of network segmentation, Zero Trust architectures, Software Defined Networking (SDN), micro‐segmentation, and secure service access solutions. Experience designing highly resilient network architectures across multiple data centres ...

authorised, and governed. Lead the ongoing modernisation of BCG's enterprise identity infrastructure, transitioning legacy directory and access systems to a scalable, cloud-native, zero‐trust identity fabric. Develop and publish BCG's Agentic Identity framework — including standards, patterns, and controls for non‐human identities, service accounts … identity architecture, spanning directory services, PAM, IGA, and secrets management. Demonstrated experience in identity modernisation programmes — including AD transformation, cloud identity migration, and zero‐trust identity adoption. Proven understanding of, or experience with, non‐human identity management — including service accounts, API credentials, and automated workloads — with appetite ...

layers. Securing Applications and API. Perform technical assessments, threat modeling, and design reviews for enterprise-scale platforms and high-risk systems. Design and validate Zero Trust architectures across identity, device, network, application, and data layers. Define enterprise security architecture guardrails, controls, and patterns aligned to NIST … Zero Trust, and industry regulations. Support architecture governance boards, ensuring all designs adhere to security standards. Identify systemic, long-term structural risks and drive enterprise remediation initiatives 4. Delivery Leadership Translate architectural strategy into actionable, sequenced roadmaps with clear deliverables, success criteria, and dependencies. Track roadmap progress, remove ...

application layers. Securing Applications and API.Perform technical assessments, threat modelling, and design reviews for enterprise-scale platforms and high‐risk systems. Design and validate Zero Trust architectures across identity, device, network, application, and data layers.3. Governance, Standards & Risk ManagementDefine enterprise security architecture guardrails, controls, and patterns aligned … NIST, CIS, ISO 27001, Zero Trust, and industry regulations. Support architecture governance boards, ensuring all designs adhere to security standards. Identify systemic, long-term structural risks and drive enterprise remediation initiatives4. Delivery LeadershipTranslate architectural strategy into actionable, sequenced roadmaps with clear deliverables, success criteria, and dependencies. Track roadmap ...

full stack observability, SRE and AIOps. Ensure Robustness & Security: Own the design of enterprise-wide applications that are highly available, fault-tolerant, and secure zero trust identity and access management (never trust, always verify).Manage & Mentor: Lead teams of architects and engineers, providing technical coaching, career counselling … more cloud platforms (AWS, Azure, GCP, IBM), including PaaS and API gateway, IaaS including but not limited to network design, connectivity patterns, zero trust IAM, compute, storage backup, HA and DR strategies, container platforms and orchestration and iPaaSEmbrace the Agentic Future: Demonstrate a passion for Agentic ...

full stack observability, SRE and AIOps. Ensure Robustness & Security: Own the design of enterprise-wide applications that are highly available, fault-tolerant, and secure zero trust identity and access management (never trust, always verify). Manage & Mentor: Lead teams of architects and engineers, providing technical coaching, career … more cloud platforms (AWS, Azure, GCP, IBM), including PaaS and API gateway, IaaS including but not limited to network design, connectivity patterns, zero trust IAM, compute, storage backup, HA and DR strategies, container platforms and orchestration and iPaaS Embrace the Agentic Future: Demonstrate a passion for Agentic ...

orchestration, state management, and autonomy. Ensure Robustness & Security: Own the design of enterprise-wide applications that are highly available, fault-tolerant, and secure zero trust identity and access management (never trust, always verify).Drive Strategy & Modernization: Partner directly with clients and where necessary our partner ecosystem … more cloud platforms (AWS, Azure, GCP, IBM), including PaaS and API gateway, IaaS including but not limited to network design, connectivity patterns, zero trust IAM, compute, storage backup, HA and DR strategies, container platforms and orchestration and iPaaSAgentic Vision: A clear vision for the "Agent Economy." Experience conceptualizing ...

maintain security architecture across identity, endpoints, networks, cloud, SaaS, data, applications and integration platforms.Design and implement modern security controls, with a strong focus on Zero Trust, secure-by-design principles and automation.Lead security architecture reviews and threat modelling for major projects, new products, high-risk integrations and emerging … implementing security controls in a Microsoft-centric environment, including Microsoft 365, Entra ID, Defender XDR, Sentinel, Azure and Microsoft Purview.Strong knowledge of identity security, Zero Trust, cloud security, data security, endpoint security, network security, application security, API security and secure software development.Experience of security architecture review, threat modelling ...

security architecture across identity, endpoints, networks, cloud, SaaS, data, applications and integration platforms. Design and implement modern security controls, with a strong focus on Zero Trust, secure-by-design principles and automation. Lead security architecture reviews and threat modelling for major projects, new products, high-risk integrations … security controls in a Microsoft-centric environment, including Microsoft 365, Entra ID, Defender XDR, Sentinel, Azure and Microsoft Purview. Strong knowledge of identity security, Zero Trust, cloud security, data security, endpoint security, network security, application security, API security and secure software development. Experience of security architecture review, threat ...

Network Architecture & Design: Lead design and delivery of secure, resilient network infrastructure across on-premises data centres and hybrid cloud environments Architect network segmentation, Zero Trust access models, and VPC/VLAN designs that enforce security policy without over-complicating operations Define network resilience, failover, and disaster recovery … Strong understanding of DevSecOps principles and how to embed security into CI/CD and infrastructure-as-code workflows Proven experience designing and implementing Zero Trust, least-privilege access, or network segmentation architectures Deep knowledge of cloud networking (AWS VPC, Azure vNets, or GCP) and hybrid connectivity models ...

Network Architecture & Design: Lead design and delivery of secure, resilient network infrastructure across on-premises data centres and hybrid cloud environments Architect network segmentation, Zero Trust access models, and VPC/VLAN designs that enforce security policy without over-complicating operations Define network resilience, failover, and disaster recovery … Strong understanding of DevSecOps principles and how to embed security into CI/CD and infrastructure-as-code workflows Proven experience designing and implementing Zero Trust, least-privilege access, or network segmentation architectures Deep knowledge of cloud networking (AWS VPC, Azure vNets, or GCP) and hybrid connectivity models ...

support Kroll's business, security, and availability requirements. Lead network segmentation initiatives at macro and micro levels, applying security best practices, Zero Trust principles, and identity-based access controls where appropriate. Administer and optimise Cisco networking technologies, Palo Alto firewalls, VPN services, SD-WAN platforms, and cloud-native … concepts to support safe and repeatable infrastructure changes. Experience with network monitoring, observability, configuration compliance, inventory, or source-of-truth platforms. Exposure to Zero Trust architecture and advanced network security technologies, including Cisco ISE or other network access control platforms. Familiarity with Microsoft Windows Server, Active Directory ...

ensure alignment with the Cyber Resilience Act.Architecture & DesignDefine secure architectures for embedded systems, mobile apps, and cloud platforms, including identity, secrets, data protection, and zero‐trust patterns.Specify embedded security controls (secure boot, roots of trust, key provisioning, secure OTA) and establish cloud security best practices across … Proficient in hardware security technologies, including Hardware Security Modules (HSM), secure element integration, and sensor-level protection. Skilled in cloud-native security practices, and zero-trust architecture. Experienced in advanced testing techniques, including penetration testing, fuzzing, and reverse engineering of embedded firmware. Knowledgeable in privacy engineering and compliance ...

with the Cyber Resilience Act. Architecture & Design Define secure architectures for embedded systems, mobile apps, and cloud platforms, including identity, secrets, data protection, and zero‐trust patterns. Specify embedded security controls (secure boot, roots of trust, key provisioning, secure OTA) and establish cloud security best practices across … Proficient in hardware security technologies, including Hardware Security Modules (HSM), secure element integration, and sensor-level protection. Skilled in cloud-native security practices, and zero-trust architecture. Experienced in advanced testing techniques, including penetration testing, fuzzing, and reverse engineering of embedded firmware. Knowledgeable in privacy engineering and compliance ...

e.g. VRRP, LACP, Virtual‐Chassis Proficiency in using network management tools (e.g., SolarWinds) Experience of implementing SD‐WAN, MPLS technologies Experience with network segmentation, zero trust principles and micro‐segmentation Knowledge of IPv6 implementation and transition strategies Familiarity with wireless security protocols (e.g., WPA3, 802.1X) Key required experience … e.g. VRRP, LACP, Virtual‐Chassis Proficiency in using network management tools (e.g., SolarWinds) Experience of implementing SD‐WAN, MPLS technologies Experience with network segmentation, zero trust principles and micro‐segmentation Knowledge of IPv6 implementation and transition strategies Familiarity with wireless security protocols (e.g., WPA3, 802.1X) Additional experience beneficial ...

Python Support PAM integrations for CI/CD and DevOps pipelines (Secrets Management). Security, Risk & Compliance Act as SME for PAM best practices, Zero Trust principles, and least privilege. Support internal and external audits Produce compliance reports and evidence from CyberArk. Identify risks and recommend continuous security … CyberArk certifications: CyberArk Defender CyberArk Sentry CyberArk PAM-CDE/EPM certifications Experience with: CyberArk EPM (Endpoint Privilege Manager) CyberArk Secrets Management Exposure to: Zero Trust Architecture Cloud-native PAM patterns DevSecOps and container security Prior experience in regulated industries (Energy Sector). Experience leading PAM transformation ...

required. * Microsoft Security, Compliance or Azure certifications. * Experience with Microsoft Defender technologies. * Understanding of GDPR, ISO 27001 and other compliance frameworks. * Knowledge of Zero Trust security principles. * Experience delivering Microsoft 365 transformation or migration projects. Pre-Sales Experience Highly Beneficial Candidates who have supported technical pre-sales activities … Defender for Office 365, Defender for Cloud Apps, Microsoft Sentinel, Microsoft Entra ID, Azure Active Directory, Conditional Access, Identity and Access Management (IAM), Zero Trust, GDPR, ISO 27001, Cyber Essentials, Risk Management, Security Consultancy, Cloud Security, Compliance Solutions, Data Classification, PowerShell, Technical Consultancy, Solution Design, Pre-Sales, Professional ...

Governance & Operational Support Configure network security policies, firewall rules, routing controls, access restrictions and traffic inspection capabilities. Implement secure-by-design patterns aligned to Zero Trust, least privilege, defence-in-depth and cloud security best practice. Support network governance processes, including naming standards, tagging, policy compliance, change control … balancing, segmentation and traffic inspection. Experience integrating Azure networking with Microsoft 365, identity platforms, security tooling, SaaS applications and on-premises infrastructure. Understanding of Zero Trust, network security, least privilege, governance, audit, compliance and cyber security best practice. Ability to troubleshoot connectivity, routing, DNS, firewall, packet flow, latency ...

including Conditional Access, MFA, Identity Governance, PIM, RBAC and SSO. Manage user lifecycle processes, access controls and secure identity services in line with Zero Trust principles. Infrastructure & VMware Administer VMware, Windows Server, virtual infrastructure, storage, networking, backup and disaster recovery services. Plan upgrades, maintenance and patching, ensuring infrastructure … Azure, Microsoft 365, VMware, Intune, Autopilot, Entra ID and Conditional Access. Cyber security capability across security operations, vulnerability management, monitoring, incident response, Defender, Sentinel, Zero Trust, risk, compliance and governance. Professional strengths in PowerShell automation, documentation, problem solving, project delivery, vendor management, stakeholder engagement and continuous improvement. What ...

network architecture decisions with a focus on scalability, resiliency, and security (high availability, redundancy, segmentation). Implement and enforce network security controls including segmentation, zero trust principles, and secure access patterns. Support hybrid connectivity models (site‐to‐site VPN, client VPN, ExpressRoute, Direct Connect, SD‐WAN). Monitor … response. Operates in a fast‐paced environment requiring adaptability, ownership, and good attention to detail. What will help you on the job Experience implementing zero trust or modern network security architectures (ZTNA, SASE, SSE). Familiarity with infrastructure‐as‐code and network automation (Python, Ansible, Terraform, PowerShell). ...

reusable guardrails that let teams move quickly within approved boundaries.Apply cloud-native security patterns: IAM, network segmentation, workload identity, secrets management, least privilege, zero trust, runtime security, and auditability.Guide secure architecture for APIs, microservices, event-driven systems, SaaS integrations, and developer tooling.Partner with platform, backend, DevOps, QA, product … admission control, network policies, workload identity, pod security, secrets, ingress, and runtime protection.Policy-as-code (OPA, Gatekeeper, Kyverno, or equivalent). IAM, least privilege, zero trust, workload identity, service-to-service authentication, and identity-driven security models.Secrets management: secure storage, rotation, access control, pipeline integration, runtime injection ...

services - Load balancing and application delivery technologies Network Security You'll bring experience with: - Palo Alto Networks firewalls, Panorama and GlobalProtect - Network segmentation and Zero Trust architectures - Secure network design aligned with industry best practice - VPN technologies, remote access and perimeter security Extreme Networks Technologies Experience with … following: - Palo Alto PCNSE - Extreme Networks certifications - ITIL Foundation (v3 or v4) - Azure Network Engineer Associate - AWS Advanced Networking Speciality - Experience with SIEM, Zero Trust and network observability platforms Why Join UKHSA? This is your opportunity to apply your technical expertise to work that genuinely makes a difference. ...

global visibility and governance of all devices. Identity & Access Management Own Entra ID operations including identity lifecycle, access control, governance, and access reviews. Enforce Zero Trust principles, MFA, Conditional Access, least privilege, and role-based access. Improve privileged access management and identity security structures. Ensure compliance with audit … user experience optimisation. Deep knowledge of Microsoft Intune, Autopilot, and modern endpoint management. Strong expertise in Entra ID, identity governance, Conditional Access, MFA, Zero Trust, and least privilege models. Experience managing Microsoft 365 at enterprise scale. Strong understanding of cloud networking, VPN, WiFi, secure access, and hybrid connectivity. ...