Senior Zero Trust Security Architect - Azure, AWS, NIST 800-207

Senior Zero Trust Security Architect

AxiaMetrics is recruiting a Senior Zero Trust Security Architect for an enterprise client. This is a senior leadership role: you will own the Zero Trust strategy and architecture vision across Azure, AWS, hybrid and on-premises environments, act as a trusted advisor to the CIO, CISO and Enterprise Architecture, and make sure security-by-design is built into every major technology initiative.

KEY SKILLS - Zero Trust Architecture (NIST 800-207): strategy, roadmap, reference architectures and governance - Azure security: Entra ID, Conditional Access, PIM, Defender for Cloud, Sentinel, Azure Policy, Key Vault, AKS - AWS security: IAM, Organizations, Security Hub, GuardDuty, Inspector, KMS, WAF, Shield, EKS - Identity security: IAM, PAM (CyberArk, BeyondTrust), IGA (SailPoint, Saviynt), RBAC/ABAC, JIT/JEA - ZTNA, SASE, SDP and micro-segmentation - CSPM and CWPP (Prisma Cloud, Wiz), Defender XDR, CrowdStrike Falcon, Splunk - DevSecOps and secure IaC (Terraform, Bicep, CloudFormation)

THE ROLE - Define and own the enterprise Zero Trust security strategy and roadmap - Provide architectural leadership for cloud security transformation across Azure and AWS - Act as lead security authority on major technology and digital transformation programmes - Architect secure cloud landing zones and governance frameworks, and security architectures for cloud-native, container, microservices, data and hybrid platforms - Design enterprise IAM architectures, including PIM/PAM, SSO, MFA, Conditional Access and identity governance - Lead the design of Zero Trust network architectures to reduce attack surface and lateral movement risk - Provide architectural direction for security monitoring, threat detection, incident response and cyber resilience - Chair architecture review boards and lead security risk assessments and design assurance - Oversee compliance with ISO 27001, NIST CSF, NIST 800-53, NIST 800-207, CIS Controls, GDPR and Cyber Essentials Plus - Present security posture, risk and investment cases to executive and board-level stakeholders - Lead and mentor security architects and engineers

REQUIRED EXPERIENCE - 12-15+ years in information and cyber security - 7+ years in security architecture leadership roles - Proven leadership of enterprise-scale Zero Trust transformation programmes - Extensive experience securing Azure and AWS environments in large enterprises - Track record of advising executives, architecture boards and governance forums - Experience leading globally distributed teams and large transformation programmes - Strong commercial awareness and influencing, communication and consulting skills

DESIRABLE CERTIFICATIONS CISSP, CCSP, CISM, SC-100, AZ-305, AWS Security Specialty, AWS Solutions Architect Professional, SABSA, TOGAF, CZTP

2 days a week on-site are needed.