Zscaler Architect

Programme: Private Banking Technology Transformation

Role Overview

A major UK bank is seeking two experienced Senior Security Consultants to support its Private Banking transformation programme.

The programme involves building a new private banking platform essentially from the ground up, using a modern technology stack and architecture.

The successful consultants will be dedicated to the programme, working closely with the bank's existing security, architecture and engineering teams to ensure that security is embedded throughout the platform design, development and implementation lifecycle.

Key Responsibilities

• Provide security architecture and application security expertise across the new private banking platform.
• Define and influence secure architecture patterns across cloud, on-premises infrastructure, applications, mobile, web and streaming technologies.
• Design and implement Zero Trust security principles, including identity-based access controls and least-privilege access.
• Provide technical expertise in Zscaler security solutions, including Zscaler Internet Access (ZIA), Zscaler Private Access (ZPA) and Zscaler Digital Experience (ZDX).
• Advise on Zscaler integration with cloud environments, enterprise applications, user endpoints and existing security infrastructure.
• Support the adoption of Zero Trust Network Access (ZTNA), replacing traditional network-centric access approaches where appropriate.
• Work alongside architecture, engineering, development and security teams to embed security throughout the software development lifecycle.
• Review solution architectures, identify security weaknesses and challenge poor or outdated architectural patterns.
• Recommend modern security controls and architectural alternatives aligned with enterprise security strategy.
• Provide security input into application development, API security, source-code management and Dev Sec Ops practices.
• Support cloud security architecture across public and private cloud environments.
• Ensure security controls address regulatory, operational resilience and data protection requirements relevant to a major UK banking environment.
• Communicate complex security concepts and recommendations effectively to both technical and business stakeholders.

Essential Skills and Experience

• Security Architecture
• Extensive experience in enterprise security architecture and security design.
• Broad security knowledge across cloud, on-premises infrastructure, applications, mobile and web technologies.
• Experience designing secure technology platforms and large-scale transformation programmes.
• Ability to identify architectural weaknesses and recommend modern, secure alternatives.
• Strong understanding of Zero Trust architecture and security-by-design principles.
• Hands-on experience with the Zscaler security platform and enterprise implementations.
• Strong knowledge of Zscaler Internet Access (ZIA), including secure web gateway, cloud firewall, URL filtering and threat protection.
• Strong knowledge of Zscaler Private Access (ZPA), including Zero Trust Network Access (ZTNA), application segmentation and secure private application connectivity.
• Understanding of Zscaler Digital Experience (ZDX) and end-user experience monitoring.
• Experience integrating Zscaler with enterprise identity providers, such as Microsoft Entra ID, Active Directory and SSO solutions.
• Knowledge of Zscaler deployment architectures, traffic forwarding, policy management and security controls.
• Experience integrating Zscaler with cloud platforms, enterprise networks and existing security tooling.
• Understanding of how Zscaler supports the transition from traditional VPN and perimeter-based security to a Zero Trust model.
• Cloud and Application Security

• Strong experience in at least one of the following areas

• Cloud security architecture and engineering.
• Application development and application security.
• Source-code management and Dev Sec Ops.
• Knowledge of cloud security controls, IAM, encryption, network segmentation and workload protection.
• Understanding of secure SDLC, code repositories, CI/CD pipelines and application vulnerability management.
• Experience with API security, web application security and modern application architectures.
• Infrastructure and Emerging Technologies
• Understanding of on-premises infrastructure and hybrid cloud environments.
• Knowledge of streaming platforms and associated security considerations.
• Experience securing mobile applications, web applications, web servers and APIs.
• Understanding of modern infrastructure, connectivity and identity security patterns.
• Business and Stakeholder Skills
• Strong business awareness and ability to understand the security implications of business and technology decisions.
• Excellent communication and stakeholder management skills.
• Ability to engage confidently with senior architects, engineers, security leaders and business stakeholders.
• Experience working within complex enterprise environments, ideally financial services or banking.
• Experience working within UK financial services or private banking.
• Knowledge of UK financial services regulatory and security requirements, including FCA, PRA, operational resilience and relevant data protection obligations.
• Zscaler implementation, migration or architecture certification.
• Experience with Microsoft Azure, AWS or Google Cloud Platform.
• Familiarity with SIEM, SOAR, EDR and identity security technologies.
• Experience with Dev Sec Ops, container security, Kubernetes and API gateways.
• Knowledge of security frameworks such as NIST CSF, ISO 27001 and SABSA.