Zero Trust Security Architect - London

Role: Zero Trust Security Architect

Career Level: Consultant / Manager

Location: London

Travel/Mobility Requirement: Flexibility to travel to client site when required

Security Clearance: Willingness to undergo a Security Clearance process requiring 5+ years UK address history.

Overview

Design, implement, and optimise enterprise‑scale Zero Trust security architectures. Gain hands‑on experience with platforms such as Zscaler and develop a strong understanding of modern identity‑centric, cloud‑first security models. Collaborate across teams to shape secure architectures, define strategic roadmaps, and support secure transformation across networks, applications, and endpoints.

Responsibilities

• Architecture & Design – Lead the design and implementation of Zero Trust architectures for users, devices, applications, and data. Establish secure access patterns using cloud‑based security and Zero Trust platforms (e.g., Zscaler ZIA, ZPA, ZDX). Create enterprise‑wide security blueprints and reference architectures aligned with Zero Trust principles (NIST 800‑207, CISA). Design scalable identity‑centric security controls using SSO, MFA, device posture, and least‑privilege access models. Collaborate with networking teams to modernise WAN and remote access using cloud security and SASE frameworks.
• Implementation & Engineering – Deploy, configure, and optimise Zero Trust technologies, including policy creation, fine‑tuning, app segmentation, connector deployment, and client connector configuration. Integrate Zero Trust solutions with identity providers (Entra AD, Okta), SIEM/SOAR systems, and endpoint platforms such as CrowdStrike. Collaborate with infrastructure teams to migrate legacy VPN, proxy, and firewall solutions to cloud‑native Zero Trust models. Conduct proof‑of‑concept evaluations and technical validation sessions.
• Security Leadership & Strategy – Drive the organisation’s Zero Trust strategy and security roadmap; provide architectural governance and ensure best practices. Conduct threat modelling, gap assessments, and risk evaluations for critical applications and network paths. Advocate for modern security frameworks and secure‑by‑design principles.
• Operations & Optimisation – Troubleshoot deployment issues, performance concerns, and identity‑related access failures. Monitor and tune telemetry, logs, and analytics to maintain optimal operational performance. Provide technical mentorship and training to internal security and networking teams.

Qualifications

• Technical Expertise – Extensive experience in cybersecurity architecture or senior engineering roles. Hands‑on expertise with Zscaler ZIA, ZPA, ZDX or similar, Zscaler Client Connector App Connectors, Cloud Firewall, Cloud Sandbox, DLP, CASB. Deep understanding of Zero Trust frameworks (NIST 800‑207, SASE, SSE), identity and access management (Azure AD, Okta, Ping), modern network design (SD‑WAN, DNS security, routing fundamentals), and endpoint security (EDR/XDR, device posture assessment).
• Soft Skills – Strong communication and stakeholder management skills; ability to translate complex security concepts into business‑friendly language; experience working within large, matrixed enterprises; proven ability to lead cross‑functional initiatives.

Set Yourself Apart

• Zscaler Certification (ZCCA‑IA, ZCCA‑PA, ZCCP)
• Security credentials such as CISSP, CCSP, or similar
• Cloud certifications in Azure, AWS, GCP (highly desirable)
• Certifications from other leading SASE/SSE vendors (e.g., Palo Alto Prisma, Netskope)
• Network certification such as CCNA or equivalent

What’s in it for you

In addition to a competitive basic salary, you will receive an extensive benefits package, including 25 days of annual vacation, private medical insurance, and 3 extra days of leave per year for charitable work of your choice. Flexibility and mobility are required to deliver this role and may involve onsite time with clients and partners.

Equal Employment Opportunity Statement

Accenture is an equal‑opportunity employer and welcomes applications from all sections of society. We do not discriminate on grounds of race, religion or belief, ethnic or national origin, disability, age, citizenship, marital or civil partnership status, sexual orientation, or gender identity, or any other basis as protected by applicable law.