Senior Security Architect

🔐 Zero Trust Security Architect

💷 £800 per day

✅ Outside IR35

📅 6-Month Initial Contract

📍 London (2 Days Per Week Onsite)

🔥 THE ROLE

We're looking for an experienced Zero Trust Security Architect to take ownership of security architecture across End User Computing (EUC) and Collaboration platforms, ensuring robust security controls, governance, and compliance across a complex enterprise environment.

You'll be the security authority, driving architecture decisions, mitigating risk, and ensuring secure delivery across critical business platforms.

🎯 KEY RESPONSIBILITIES

🔹 Define and own the security architecture for EUC & Collaboration platforms

🔹 Review and approve High-Level Designs (HLDs) and Low-Level Designs (LLDs)

🔹 Provide formal security architecture sign-off

🔹 Design and implement Zero Trust security controls

🔹 Lead Identity & Access Management strategies

🔹 Deliver Conditional Access, Privileged Access Management (PAM), and Least Privilege frameworks

🔹 Define Data Protection, DLP, and Information Barrier requirements

🔹 Represent Security within Architecture Review Boards

🔹 Partner with Security Operations Centre (SOC) teams and security leadership

🔹 Manage security risk registers and governance processes

🔹 Validate solutions against CIS Benchmarks, NIST, ISO 27001, and internal security standards

💡 REQUIRED EXPERIENCE

✅ 7+ years' experience as a Security Architect

✅ Strong enterprise infrastructure and end-user transformation background

✅ Experience securing EUC and Collaboration platforms in highly regulated environments

✅ Deep expertise in:

🔐 Zero Trust Architecture

🛡 Microsoft Defender Suite

👤 Microsoft Entra ID

🚦 Conditional Access

🔑 Identity Protection

✅ Strong experience working with SOC and SIEM teams

✅ Excellent stakeholder management and executive communication skills

✅ Proven track record delivering within regulated industries

✅ Experience operating across large global organisations and distributed teams

🛠 TECHNICAL SKILLS

🔹 Microsoft Defender for Endpoint

🔹 Defender for Cloud Apps

🔹 Entra ID Identity Protection

🔹 Conditional Access

🔹 Microsoft Purview DLP

🔹 Microsoft Sentinel (or equivalent SIEM)

🔹 Privileged Access Management (CyberArk, BeyondTrust etc.)

🔹 Network Segmentation & Micro-Segmentation

🔹 SD-WAN Security

🔹 NIST Cyber Security Framework

🔹 ISO 27001

⭐ DESIRABLE

🏦 Banking or Financial Services experience

🌍 Global transformation programme experience

🎓 CISSP, CISM or equivalent

🎓 Microsoft Security certifications

🎓 Azure Security Engineer Associate