Senior Zero Trust Security Architect - Azure, AWS, NIST

Axia Metrics is recruiting a Senior Zero Trust Security Architect for an enterprise client. This is a senior leadership role: you will own the Zero Trust strategy and architecture vision across Azure, AWS, hybrid and on-premises environments, act as a trusted advisor to the CIO, CISO and Enterprise Architecture, and make sure security-by-design is built into every major technology initiative.

• Zero Trust Architecture (NIST 800-207): strategy, roadmap, reference architectures and governance
• Azure security:
  Entra , Conditional Access, PIM, Defender for Cloud, Sentinel, Azure Policy, Key Vault, AKS
• AWS security: IAM, Organizations, Security Hub, Guard Duty, Inspector, KMS, WAF, Shield, EKS
• Identity security: IAM, PAM (Cyber Ark, Beyond Trust), IGA (SailPoint, Saviynt), RBAC/ABAC, JIT/JEA
• ZTNA, SASE, SDP and micro-segmentation
• CSPM and CWPP (Prisma Cloud, Wiz), Defender XDR, Crowd Strike Falcon, Splunk
• Dev Sec Ops  and secure IaC (Terraform, Bicep, Cloud Formation)

• Define and own the enterprise Zero Trust security strategy and roadmap
• Provide architectural leadership for cloud security transformation across Azure and AWS
• Act as lead security authority on major technology and digital transformation programmes
• Architect secure cloud landing zones and governance frameworks, and security architectures for cloud-native, container, microservices, data and hybrid platforms
• Design enterprise IAM architectures, including PIM/PAM, SSO, MFA, Conditional Access and identity governance
• Lead the design of Zero Trust network architectures to reduce attack surface and lateral movement risk
• Provide architectural direction for security monitoring, threat detection, incident response and cyber resilience
• Chair architecture review boards and lead security risk assessments and design assurance
• Oversee compliance with ISO 27001, NIST CSF, NIST 800-53, NIST 800-207, CIS Controls, GDPR and Cyber Essentials Plus
• Present security posture, risk and investment cases to executive and board-level stakeholders
• Lead and mentor security architects and engineers

• 12-15+ years in information and cyber security
• 7+ years in security architecture leadership roles
• Proven leadership of enterprise-scale Zero Trust transformation programmes
• Extensive experience securing Azure and AWS environments in large enterprises
• Track record of advising executives, architecture boards and governance forums
• Experience leading globally distributed teams and large transformation programmes
• Strong commercial awareness and influencing, communication and consulting skills

CISSP, CCSP, CISM, SC-100, AZ-305, AWS Security Specialty, AWS Solutions Architect Professional, SABSA, TOGAF, CZTP