Senior Zero Trust Security Architect - Azure, AWS, NIST 800-207

Project overview

Senior Zero Trust Security Architect

AxiaMetrics is recruiting a Senior Zero Trust Security Architect for an enterprise client. This is a senior leadership role: you will own the Zero Trust strategy and architecture vision across Azure, AWS, hybrid and on-premises environments, act as a trusted advisor to the CIO, CISO and Enterprise Architecture, and make sure security-by-design is built into every major technology initiative.

Project details

• Start: ASAP
• Duration: 6 months
• Location: Coventry, UK, GB

KEY SKILLS

• Zero Trust Architecture (NIST 800-207): strategy, roadmap, reference architectures and governance
• Azure security: Entra ID, Conditional Access, PIM, Defender for Cloud, Sentinel, Azure Policy, Key Vault, AKS
• AWS security: IAM, Organizations, Security Hub, GuardDuty, Inspector, KMS, WAF, Shield, EKS
• Identity security: IAM, PAM (CyberArk, BeyondTrust), IGA (SailPoint, Saviynt), RBAC/ABAC, JIT/JEA
• ZTNA, SASE, SDP and micro-segmentation
• CSPM and CWPP (Prisma Cloud, Wiz), Defender XDR, CrowdStrike Falcon, Splunk
• DevSecOps and secure IaC (Terraform, Bicep, CloudFormation)

THE ROLE

• Define and own the enterprise Zero Trust security strategy and roadmap
• Provide architectural leadership for cloud security transformation across Azure and AWS
• Act as lead security authority on major technology and digital transformation programmes
• Architect secure cloud landing zones and governance frameworks, and security architectures for cloud-native, container, microservices, data and hybrid platforms
• Design enterprise IAM architectures, including PIM/PAM, SSO, MFA, Conditional Access and identity governance
• Lead the design of Zero Trust network architectures to reduce attack surface and lateral movement risk
• Provide architectural direction for security monitoring, threat detection, incident response and cyber resilience
• Chair architecture review boards and lead security risk assessments and design assurance
• Oversee compliance with ISO 27001, NIST CSF, NIST 800-53, NIST 800-207, CIS Controls, GDPR and Cyber Essentials Plus
• Present security posture, risk and investment cases to executive and board-level stakeholders
• Lead and mentor security architects and engineers

REQUIRED EXPERIENCE

DESIRABLE CERTIFICATIONS CISSP, CCSP, CISM, SC-100, AZ-305, AWS Security Specialty, AWS Solutions Architect Professional, SABSA, TOGAF, CZTP

2 days a week on-site are needed.

• 12-15+ years in information and cyber security
• 7+ years in security architecture leadership roles
• Proven leadership of enterprise-scale Zero Trust transformation programmes
• Extensive experience securing Azure and AWS environments in large enterprises
• Track record of advising executives, architecture boards and governance forums
• Experience leading globally distributed teams and large transformation programmes
• Strong commercial awareness and influencing, communication and consulting skills