Architect – Zero Trust Network Access

Licensed sponsor London Full-time Posted 3 hours ago

About CACI

From our headquarters in London, we're busy empowering organisations to make bold, strategic moves with the power of data and technology. Founded in 1975, our operations take place from multiple offices across the UK, Europe and India with over 1600 Full time employees and an annual turnover of £179m.

Our expertise spans industries, from retail and education to public sector and transport - delivering intelligent solutions that drive progress and create measurable impact. Whether it's business intelligence, customer marketing, cloud infrastructure, cybersecurity, critical national infrastructure or data management, our approach is never one-size-fits-all.

We don't just deliver solutions; we build for the tomorrow's world, all while fostering a culture that allows employees to be their authentic selves and succeed in their careers.

About Network Services

CACI Network Services is a rapidly expanding specialist IT and Networks consultancy offering a wide variety of opportunities to work within challenging and exciting environments with our major clients in Global Media, Banking, Government, Telecoms & Utilities.

Architect – Zero Trust Network Access (ZTNA)

Location: London

Role Overview

The Remote Access team within End User Computing is responsible for delivering secure remote access capabilities for both corporate and BYOD devices across the organisation. Operating within an agile environment, the team is structured into dedicated delivery squads, each focused on a specific technology domain.

The Architect will be responsible for leading the design, engineering, and evolution of the Zero Trust Network Access (ZTNA) platform supporting both corporate and personal iOS, Windows, and macOS devices. This role will drive the development of secure access solutions, work closely with Product Management on backlog refinement and prioritisation, and ensure an optimal balance between security, scalability, and user experience.

Key Responsibilities

Design, develop, and enhance a global Zero Trust Network Access solution supporting over 100,000 users.
Identify opportunities for automation, telemetry improvements, and operational efficiencies.
Drive platform enhancements and work with vendors to improve product capabilities.
Provide technical leadership for ZTNA engineering initiatives and roadmap delivery.
Manage complex technical issues, problem management activities, and L3 support escalations.
Build and maintain technical documentation, including solution designs, release notes, testing documentation, and operational procedures.
Collaborate with technology, security, and infrastructure teams to ensure solutions meet security, compliance, and engineering standards.
Design and document Zero Trust architecture, standards, and implementation strategies.
Oversee engineering activities across the ZTNA platform estate.
Ensure adherence to SDLC, engineering governance, and release management processes.

Required Skills & Experience

Technical Expertise

Extensive hands-on experience delivering VPN, Remote Access, and Cyber Security solutions within large enterprise environments.
Strong understanding of networking protocols and technologies, including:
IP Networking
Routing
TLS
SSL VPN
ESP
IKEv2
ActiveSync
ICA
RDP
Experience designing highly available and resilient infrastructure solutions, including:
Data Centres
Virtualisation Platforms
Enterprise Networks
Disaster Recovery & Resilience Models
Strong expertise in Palo Alto Prisma Access and Zero Trust Network Access (ZTNA).
Understanding of:
Citrix
Microsoft Azure MFA
SAML-based Authentication
Azure Active Directory
Conditional Access
DNS
DHCP
PKI Certificate Infrastructure
Experience working with APIs and integration tools such as Postman or Bruno.
Strong troubleshooting and problem-solving capabilities in medium to large enterprise environments.

Desirable Skills

Knowledge of Agile delivery methodologies and best practices.
Experience with:
Jira
Confluence
Splunk
Fiddler
Wireshark
ServiceNow
Exposure to Windows, macOS, iOS, and Android platforms.

Education & Certifications

Bachelor's degree or equivalent qualification.
Agile and/or ITIL certification preferred.
Relevant networking and cybersecurity certifications desirable.

Candidate Profile

The successful candidate will be

A hands-on technical expert with strong networking and security architecture experience.
An excellent communicator with strong documentation skills.
Comfortable engaging with both technical and non-technical stakeholders.
Organised, proactive, and focused on continuous platform improvement.
Analytical, logical, and solution oriented.
Able to challenge existing designs and processes constructively.
Experienced working across globally distributed teams and multiple time zones.
Passionate about staying current with emerging cybersecurity threats and industry best practices.

Key Technologies

Expected behaviours

We have a structured performance management framework which measures continual attainment against key personal behaviours. We believe this is an important part of our success and culture. Joining as a team member we expect you to act as a role model and exemplar against these behaviours which are to be:

Proactive
Adaptable
Flexible
A team player
Reliable

Flexibility

The key to our success is our teamwork and collaboration. We take a hybrid approach - working remotely and coming into the office depending on the business demand and collaboration required as part of the delivery process.

Equal opportunities

CACI is proud to be an equal employer. Embracing the diversity of our people, we are on a journey to build a truly inclusive work environment where no one is treated less favourably due to ethnic origin, age, gender, veteran status, religion or belief, sexual orientation, marital status, and disability or health condition, actively working to prevent discrimination.