Security Architect

Colt provides network, voice and data centre services to thousands of businesses around the world, allowing them to focus on delivering their business goals instead of the underlying infrastructure.
Why we need this roleWe are looking for a Security Architect specialising in Cloud Security and Secure Access to join the Security and Resilience – Security Architecture team.
This role acts as a subject matter expert across cloud security architecture (IaaS/PaaS) and secure access technologies, with a primary focus on Azure and GCP environments and Colt’s strategic Zscaler platform (ZIA / ZPA).
The successful candidate will work closely with Security Engineering, SOC, Threat Intelligence and Risk functions, as well as wider technology teams (Cloud Engineering, Network Engineering, Service Delivery), to design and implement secure, scalable and Zero Trust-aligned architectures.
The Role CombinesSecurity architecture and design across cloud platforms and access layersSecurity assurance, governance and integrationStrategic engagement across Colt’s hybrid technology estateYou Will Play a Critical Role In DrivingSecure cloud adoption across Azure and GCP environmentsZero Trust Network Access (ZTNA) via Zscaler (ZIA / ZPA)Integration of identity, access and network security controlsConsistent, secure access to applications, services and data across a distributed enterpriseWhat You Will DoAct as the security architecture authority for cloud and secure access solutions, with a focus on Azure, GCP and Zscaler platformsDefine and maintain the target architecture for cloud security and secure access, aligned to Colt’s Zero Trust principlesDesign and implement secure architectures for IaaS and PaaS environments, ensuring appropriate controls across networking, compute, storage and identity layersLead the design and implementation of Zscaler Internet Access (ZIA) and Zscaler Private Access (ZPA) solutions to enable secure user-to-internet and user-to-application accessDefine architectures for Zero Trust Network Access (ZTNA), replacing or reducing reliance on traditional VPN-based access modelsDesign and implement identity-integrated access controls, leveraging Entra ID and federation technologies such as SAMLDefine secure access patterns for internal applications, SaaS services and cloud-hosted workloadsEnsure consistent integration between Zscaler, identity providers (Entra ID) and cloud platforms, supporting seamless authentication and access controlConduct security architecture reviews and provide assurance for cloud and access-related solutions, supporting formal sign-off or risk acceptance processesWork with cloud and network engineering teams to ensure secure and scalable implementation of architecture patternsSupport the adoption of Secure by Design principles across cloud-native and access solutionsEnsure alignment with regulatory and compliance requirements such as TSA, DORA and ISO27001Define and document standard architecture patterns for cloud security and secure access, including segmentation, identity enforcement and traffic controlAssess and mitigate risks associated with cloud-native architectures, including misconfiguration, over-permissioning and insecure exposure of servicesEngage with vendors (Zscaler, Microsoft, Google) to stay aligned with roadmaps and emerging capabilitiesProduce high-quality architecture artefacts, standards and guidance documentationMust HavesWhat we're looking for5+ years of experience in information security within large-scale enterprise or telecommunications environmentsStrong experience in cloud security architecture, particularly across:Microsoft AzureGoogle Cloud Platform (GCP)Strong experience with Zscaler platform, including:Zscaler Internet Access (ZIA)Zscaler Private Access (ZPA)Strong understanding of Zero Trust Network Access (ZTNA) and modern secure access architecturesExperience designing secure solutions across IaaS/PaaS environments, including networking, identity and workload protectionGood understanding of identity and authentication technologies, including Entra ID, SAML and federation-based access modelsExperience conducting security design reviews and translating policy into enforceable technical controlsExperience performing risk assessments aligned to recognised frameworksStrong understanding of networking and security technologies, including segmentation, routing, secure access and traffic inspectionAbility to translate complex technical concepts into clear business-aligned outcomesExperience working in hybrid environments, integrating cloud, on-prem and SaaS servicesStrong stakeholder engagement and communication skills (technical and non-technical)Strong team player, able to lead initiatives across engineering and architecture teamsFluent in English (technical and non-technical communication)Might HavesExperience with additional Zscaler capabilities, including:Zscaler Digital Experience (ZDX)Zscaler DeceptionZPA Privileged Remote Access (PRA)Experience with AW