Cyber Security Architect - Outside IR35 - Remote - Up to £650pd

Cyber Security Architect - Outside IR35 - Remote - Up to £650pd

Posted 3 days ago by Solirius Limited

Apply
£650 Per day
Outside
Remote
London, UK
Apply
Azure Active Directory Certified Cloud Security Professional (CCSP) Certified Information Systems Security Professional (CISSP) Cloudflare Cyber Security DevOps Github JIRA Managed Services Microsoft Azure Single Sign-On (SSO) Software as a Service (SaaS) Stakeholder Management User Acceptance Testing (UAT) Verification And Validation Web Browsers

Summary: The role of Cyber Security Architect involves leading the transformation of edge security and access control by migrating from Symantec WSS to Cloudflare One, focusing on establishing a Zero Trust Architecture. This hands-on position requires expertise in architectural design, policy development, deployment, and documentation to secure both managed and unmanaged devices. The architect will collaborate with various stakeholders to ensure a smooth transition and integration of security solutions. The position is remote and classified as outside IR35.

Key Responsibilities:

  • Architectural Ratification: Review and improve the initial Cloudflare setup to ensure it meets enterprise-grade security standards.
  • Migration & Policy Design: Lead the migration of existing Symantec WSS policies to Cloudflare SWG. Develop sophisticated Zero Trust policies for staff web browsing and application access.
  • Cloudflare One Deployment: Configure and deploy Cloudflare ZTNA and SWG from the ground up, ensuring seamless integration with EntraID.
  • Device Posture & Compliance: Implement posture checking via the WARP client to ensure only compliant, patched managed devices can access sensitive data.
  • Unmanaged Device Strategy: Configure Secure Browser (Browser Isolation) for guest access to provide restricted, secure environments for non-managed devices.
  • Application Onboarding: Successfully onboard a diverse SaaS and dev environment, including M365, Azure, Adobe, Netlify, Sage, Miro, Jira, and GitHub via SSO.
  • Stakeholder Collaboration: Partner with Identity teams and the Managed Service Provider (MSP) to manage the delicate rollout of the WARP client (ensuring the removal of Symantec WSS to avoid client conflicts).
  • Testing & Documentation: Execute rigorous UAT with test groups to prove policy efficacy and provide comprehensive "as-built" documentation for handover to operations.

Key Skills:

  • Cloudflare Mastery: Deep, hands-on experience with Cloudflare One, specifically Zero Trust Network Access (ZTNA) and Secure Web Gateway (SWG).
  • Zero Trust Expertise: Proven track record of designing and implementing Zero Trust frameworks (Identity-based access, Least Privilege, Continuous Verification).
  • Identity Integration: Strong experience integrating Zero Trust solutions with EntraID (Azure AD).
  • Endpoint Security: Experience deploying and troubleshooting the Cloudflare WARP client and implementing device posture profiles.
  • Legacy Migration: Experience migrating from traditional web proxies (specifically Symantec/Broadcom WSS) to modern SASE platforms.

Salary (Rate): £650pd

City: London

Country: UK

Working Arrangements: remote

IR35 Status: outside IR35

Seniority Level: undetermined

Industry: IT

Detailed Description From Employer:

We are seeking an experienced Cyber Security Architect to lead a critical transformation of edge security and access control environment. You will be responsible for the end-to-end migration from Symantec WSS to Cloudflare One, establishing a robust Zero Trust Architecture.

The primary focus is to replace a llegacy web proxying with Cloudflare Secure Web Gateway (SWG) and deploy Zero Trust Network Access (ZTNA) to secure a managed and unmanaged device landscape. This is a hands-on architectural role requiring design, policy development, deployment, and documentation.

Key Responsibilities

  • Architectural Ratification: Review and improve the initial Cloudflare setup to ensure it meets enterprise-grade security standards.

  • Migration & Policy Design: Lead the migration of existing Symantec WSS policies to Cloudflare SWG. Develop sophisticated Zero Trust policies for staff web browsing and application access.

  • Cloudflare One Deployment: Configure and deploy Cloudflare ZTNA and SWG from the ground up, ensuring seamless integration with EntraID.

  • Device Posture & Compliance: Implement posture checking via the WARP client to ensure only compliant, patched managed devices can access sensitive data.

  • Unmanaged Device Strategy: Configure Secure Browser (Browser Isolation) for guest access to provide restricted, secure environments for non-managed devices.

  • Application Onboarding: Successfully onboard a diverse SaaS and dev environment, including M365, Azure, Adobe, Netlify, Sage, Miro, Jira, and GitHub via SSO.

  • Stakeholder Collaboration: Partner with Identity teams and the Managed Service Provider (MSP) to manage the delicate rollout of the WARP client (ensuring the removal of Symantec WSS to avoid client conflicts).

  • Testing & Documentation: Execute rigorous UAT with test groups to prove policy efficacy and provide comprehensive "as-built" documentation for handover to operations.

Technical Skills & Experience

  • Cloudflare Mastery: Deep, hands-on experience with Cloudflare One, specifically Zero Trust Network Access (ZTNA) and Secure Web Gateway (SWG).

  • Zero Trust Expertise: Proven track record of designing and implementing Zero Trust frameworks (Identity-based access, Least Privilege, Continuous Verification).

  • Identity Integration: Strong experience integrating Zero Trust solutions with EntraID (Azure AD).

  • Endpoint Security: Experience deploying and troubleshooting the Cloudflare WARP client and implementing device posture profiles.

  • Legacy Migration: Experience migrating from traditional web proxies (specifically Symantec/Broadcom WSS) to modern SASE platforms.

Desirable

  • Experience with Remote Browser Isolation (RBI) for guest/contractor access.

  • Broad understanding of securing DevOps environments (GitHub, Netlify, etc.).

  • Relevant certifications (eg, CISSP, CCSP, or Cloudflare certifications).

Apply
Similar Jobs
Loading data...