Security Consultant

We are looking for an experienced Zero Trust Security Architect to design, implement and optimise enterprise-scale Zero Trust security architectures.

Youll work across users, devices, applications and data, helping organisations modernise their security through cloud-first, identity-centric and SASE-based approaches. The role offers hands-on exposure to leading Zero Trust technologies, including Zscaler, while working with cross-functional security, networking and infrastructure teams.

• Design and implement enterprise Zero Trust architectures aligned to NIST 800-207 and CISA principles.
• Develop secure access models using Zscaler ZIA, ZPA, ZDX and Client Connector.
• Design identity-centric controls covering SSO, MFA, device posture and least privilege.
• Deploy and optimise technologies including DLP, CASB, FWaaS, Cloud Firewall and App Connectors.
• Integrate Zero Trust platforms with Entra ID, Okta, SIEM/SOAR and endpoint security platforms.
• Support migration from legacy VPN, proxy and firewall technologies to modern Zero Trust models.
• Conduct POCs, technical validation, threat modelling and security gap assessments.
• Troubleshoot and optimise Zero Trust deployments, telemetry and access controls.
• Provide technical guidance, mentorship and architectural governance.

• 510+ years experience in cybersecurity architecture or senior engineering roles.
• Strong hands-on experience with Zscaler ZIA, ZPA, ZDX and Client Connector or similar Zero Trust technologies.
• Experience with App Connectors, Cloud Firewall, Cloud Sandbox, DLP and CASB.
• Strong understanding of Zero Trust, NIST 800-207, SASE and SSE.
• Knowledge of IAM, Entra ID/Azure AD, Okta or Ping.
• Understanding of SD-WAN, DNS security, routing and endpoint security/EDR/XDR.
• Strong communication and stakeholder management skills.
• Ability to explain complex security concepts to technical and non-technical audiences.
• Experience working in large, matrixed enterprise environments.

• Zscaler certifications such as ZCCA-IA, ZCCA-PA or ZCCP.
• CISSP, CCSP or equivalent.
• Azure, AWS or GCP cloud certifications.
• SASE/SSE certifications such as Palo Alto Prisma or Netskope.
• CCNA or equivalent networking certification.