Colt Technology Services
Security Architect - Cloud Security + Zscaler Platform

How your CV stacks up
Upload your CV to see how well it fits this job role
?%
Why we need this role
We are looking for a Security Architect specialising in Cloud Security and Secure Access to join the Security and Resilience – Security Architecture team.
This role acts as a subject matter expert across cloud security architecture (IaaS/PaaS) and secure access technologies, with a primary focus on Azure and GCP environments and Colt’s strategic Zscaler platform (ZIA / ZPA).
The successful candidate will work closely with Security Engineering, SOC, Threat Intelligence and Risk functions, as well as wider technology teams (Cloud Engineering, Network Engineering, Service Delivery), to design and implement secure, scalable and Zero Trust-aligned architectures.
The role combines:
- Security architecture and design across cloud platforms and access layers
- Security assurance, governance and integration
- Strategic engagement across Colt’s hybrid technology estate
You will play a critical role in driving:
- Secure cloud adoption across Azure and GCP environments
- Zero Trust Network Access (ZTNA) via Zscaler (ZIA / ZPA)
- Integration of identity, access and network security controls
- Consistent, secure access to applications, services and data across a distributed enterprise
What you will do
- Act as the security architecture authority for cloud and secure access solutions, with a focus on Azure, GCP and Zscaler platforms
- Define and maintain the target architecture for cloud security and secure access, aligned to Colt’s Zero Trust principles
- Design and implement secure architectures for IaaS and PaaS environments, ensuring appropriate controls across networking, compute, storage and identity layers
- Lead the design and implementation of Zscaler Internet Access (ZIA) and Zscaler Private Access (ZPA) solutions to enable secure user-to-internet and user-to-application access
- Define architectures for Zero Trust Network Access (ZTNA), replacing or reducing reliance on traditional VPN-based access models
- Design and implement identity-integrated access controls, leveraging Entra ID and federation technologies such as SAML
- Define secure access patterns for internal applications, SaaS services and cloud-hosted workloads
- Ensure consistent integration between Zscaler, identity providers (Entra ID) and cloud platforms, supporting seamless authentication and access control
- Conduct security architecture reviews and provide assurance for cloud and access-related solutions, supporting formal sign-off or risk acceptance processes
- Work with cloud and network engineering teams to ensure secure and scalable implementation of architecture patterns
- Support the adoption of Secure by Design principles across cloud-native and access solutions
- Ensure alignment with regulatory and compliance requirements such as TSA, DORA and ISO27001
- Define and document standard architecture patterns for cloud security and secure access, including segmentation, identity enforcement and traffic control
- Assess and mitigate risks associated with cloud-native architectures, including misconfiguration, over-permissioning and insecure exposure of services
- Engage with vendors (Zscaler, Microsoft, Google) to stay aligned with roadmaps and emerging capabilities
- Produce high-quality architecture artefacts, standards and guidance documentation
Reasons to use Rodeo
I’m in my final year doing Economics and I don’t know whether to apply for grad schemes now or do a masters first. What do you think?
Honest answer — it depends on where you want to end up. A lot of top grad schemes (Big 4, civil service, banking) don’t need a masters. Let’s look at the ones you’d be competitive for now, and we can decide if a masters actually adds anything.
Also worth knowing: most autumn 2026 applications are open now. Timing matters more than you think.
Start with a chat, not a search bar
Grad scheme, placement, apprenticeship? Not sure what you want yet — that's fine. Your agent talks it through with you and turns "I have no idea" into a shortlist.
Graduate Consultant — 2026 Scheme
Why you're a good match
StrongYour economics background and your summer at a regional bank line up with what PwC looks for on the consulting scheme. Applications close in four weeks.
See breakdownIt searches the market for you
Every day your agent scans the market matching roles against what actually matters to you, not just keywords on a CV.
Why you're a good match
You’ve got the grades and the economics background, and your bank internship is exactly the experience this scheme looks for. Apply soon — deadlines close within the month.
Experience fit
Your summer at the bank plus your econometrics coursework map directly to the day-one responsibilities on this scheme — client modelling, market briefings, and deal support.
Only hits
No noise. No "maybe this fits." Just roles with a clear explanation of why they're right — and where to focus when applying.
What we're looking for
Must haves:
- 5+ years of experience in information security within large-scale enterprise or telecommunications environments
- Strong experience in cloud security architecture, particularly across:
- Microsoft Azure
- Google Cloud Platform (GCP)
- Strong experience with Zscaler platform, including:
- Zscaler Internet Access (ZIA)
- Zscaler Private Access (ZPA)
- Strong understanding of Zero Trust Network Access (ZTNA) and modern secure access architectures
- Experience designing secure solutions across IaaS/PaaS environments, including networking, identity and workload protection
- Good understanding of identity and authentication technologies, including Entra ID, SAML and federation-based access models
- Experience conducting security design reviews and translating policy into enforceable technical controls
- Experience performing risk assessments aligned to recognised frameworks
- Strong understanding of networking and security technologies, including segmentation, routing, secure access and traffic inspection
- Ability to translate complex technical concepts into clear business-aligned outcomes
- Experience working in hybrid environments, integrating cloud, on-prem and SaaS services
- Strong stakeholder engagement and communication skills (technical and non-technical)
- Strong team player, able to lead initiatives across engineering and architecture teams
- Fluent in English (technical and non-technical communication)
Might haves:
- Experience with additional Zscaler capabilities, including:
- Zscaler Digital Experience (ZDX)
- Zscaler Deception
- ZPA Privileged Remote Access (PRA)
- Experience with AWS cloud platform
- Experience integrating cloud security with SOC / SIEM platforms
- Understanding of Telecoms Security Act (TSA) requirements and implementation patterns
- Experience working in regulated environments such as telecommunications or critical infrastructure
- Exposure to DevSecOps practices and cloud-native application security


Get help with your application
Your very own career expert that helps elevate your application to the next level.
What we offer you
Looking to make a mark?
At Colt, you’ll make a difference. Because around here, we empower people. We don’t tell you what to do.
Instead, we employ people we trust, who come together across the globe to create intelligent solutions.
Our global teams are full of ambitious, driven people, all working together towards one shared purpose: to put the power of the digital universe in the hands of our customers wherever, whenever and however they want.
We give our people the opportunity to inspire and lead teams, and work on projects that connect people, cities, businesses, and ideas. We want you to help us change the world, for the better.
Diversity and inclusion
Inclusion and valuing diversity of thought and experience are at the heart of our culture here at Colt. From day one, you’ll be encouraged to be yourself because we believe that’s what helps our people to thrive. We welcome people with diverse backgrounds and experiences, regardless of their gender identity or expression, sexual orientation, race, religion, disability, neurodiversity, age, marital status, pregnancy status, or place of birth.
Most recently we have:
- Signed the UN Women Empowerment Principles which guide our Gender Action Plan
- Trained 60 (and growing) Colties to be Mental Health First Aiders
Please speak with a member of our recruitment team if you require adjustments to our recruitment process to support you. For more information about our Inclusion and Diversity agenda, visit our DEI pages.
Benefits
Our benefits support you through all parts of life, for both physical and mental health.
- Flexible working hours and the option to work from home.
- Extensive induction program with experienced mentors and buddies.
- Opportunities for further development and educational opportunities.
- Global Family Leave Policy.
- Employee Assistance Program.
- Internal inclusion & diversity employee networks.
A global network
When you join Colt you become part of our global network. We are proud of our colleagues and the stories and experience they bring – take a look at ‘Our People’ site including our Empowered Women in Tech.
“It took my CV and asked me questions relevant to understanding what kind of jobs to suggest for me. Suggestions were almost perfect. Jobs were exactly what I’ve been looking for.”
Jessica, London
Location