Zero Trust Architect

Sanderson are working with a consulting client who are looking to grow their Zero Trust capability. The client is seeking an Architect to come in and implement and optimise Zero Trust security architectures.

Your responsibilities:

Architecture & Design

\n
• Leading the design and implementation of Zero Trust architectures for enterprise environments, covering users, devices, applications, and data.
\n
• Establishing secure access patterns using cloud-based security and zero-trust platforms
\n
• Creating enterprise-wide security blueprints and reference architectures aligned with Zero Trust principles
\n
• Designing scalable identity-centric security controls using SSO, MFA, device posture, and least-privilege access models.
\n
• Collaborating with networking teams to modernize WAN and remote access using cloud security and SASE frameworks.
\n

Implementation & Hands-On Engineering

\n
• Deploying, configuring, and optimising Zero Trust technologies, including:
\n
• Policy creation and fine-tuning
\n
• Managing App segmentation and connector deployment.
\n
• Zero Trust Client Connector configuration and rollout.
\n
• Integrating Zero Trust solutions with identity providers, SIEM/SOAR systems, and endpoint platforms.
\n
• Collaborating with infrastructure teams to migrate legacy VPN, proxy, and firewall solutions to cloud native Zero Trust models.
\n
• Conducting proof-of-concept evaluations and technical validation sessions.
\n

Security Leadership & Strategy

\n
• Driving the organization's Zero Trust strategy and security roadmap.
\n
• Providing architectural governance and ensuring security best practices across projects.
\n
• Conducting threat modelling, gap assessments, and risk evaluations for critical applications and network paths.
\n
• Advocate for the adoption of modern security frameworks and secure-by-design principles.
\n

Operations & Optimization

\n
• Troubleshooting Zero Trust deployment issues, performance concerns, and identity-related access failures.
\n
• Monitoring and tuning telemetry, logs, and analytics to maintain optimal operational performance.
\n
• Providing technical mentorship and training to internal security and networking teams.
\n

The following skills and experience are essential for this role:

Technical Expertise

\n
• 5-10+ years of experience in cybersecurity architecture or senior engineering roles.
\n
• Strong hands-on expertise with:\n
  \n
  • Zscaler ZIA, ZPA, ZDX or similar
  \n
  • Zscaler Client Connector
  \n
  • App Connectors, Cloud Firewall, Cloud Sandbox, DLP, CASB
  \n
\n
• Deep understanding of:\n
  \n
  • Zero Trust frameworks
  \n
  • Identity and access management
  \n
  • Modern network design
  \n
  • Endpoint security
  \n
\n

This role will require you to be willing and eligible to undergo UK security clearance.

If you're interested in the above, apply or reach out to