# Senior Principal Architect - Network and Zero Trust

**Company**: GlaxoSmithKline (GSK)
**Location**: Bengaluru
**Experience**: senior
**Job type**: full-time
**Category**: Security
**Industry**: Healthcare

**Apply**: https://gsk.wd5.myworkdayjobs.com/en-US/GSKCareers/job/Bengaluru-Luxor-North-Tower/Director---Security-Architecture---Solution-Engineering---Network---Zero-Trust-Architecture_449967?utm_source=yubhub.co&utm_medium=jobs_feed&utm_campaign=apply
**Canonical**: https://yubhub.co/job/senior-principal-architect-network-and-zero-trust-c2f9d6e8-212/

## Description

GSK is seeking a Senior Principal Architect to own the Network and Zero Trust domain as design authority. The successful candidate will be responsible for designing a Zero Trust framework from scratch, leading key activities to progress their career, and providing technical expertise to the team.

**Key Responsibilities:**

- Act as design authority for Network and Zero Trust architecture across GSK

- Own the Zero Trust policy framework: device trust, identity trust, and application access policy

- Own network segmentation and microsegmentation standards across the estate

- Own SASE and SD-WAN security architecture, secure remote access design, and DNS security architecture

- Produce architecture specifications that Solution Engineering builds from without reinterpretation

- Maintain the Network and Zero Trust reference architecture library

- Reject network and Zero Trust tooling that cannot express policy as code, integrate with the existing identity provider, or be operated by the managed service without Cyber Architecture and Solutions present

- Assure the handover pack for every Zero Trust enforcement point and segmentation policy change before the vendor takes it, and retain the architecture decision when they propose a workaround in production

- Resolve the segmentation boundary with OT Security where Purdue Level 3.5 meets the corporate network, and with Platform Security where NAC posture checks depend on EDR health

- Secure Zero Trust design funding in major programme business cases at the point segmentation is still cheap , before application teams have built east-west dependencies that cannot be unpicked

- Lead your team in using approved AI tools to improve productivity and ways of working, role-modelling responsible use and follow GSK's Responsible AI, privacy, and security requirements

- Mentor architects and engineers across the function and contribute to the architecture community of practice, setting the technical standard by example rather than by headcount

**Requirements:**

- 20+ years in network security architecture, with technical authority held through specification and design review rather than headcount

- Designing Zero Trust from the ground up , device trust, identity trust, and application access policy , and sequencing the move from a perimeter-based estate

- Network segmentation and microsegmentation standards, SASE and SD-WAN security architecture, secure remote access, and DNS security, with policy-as-code and automated enforcement

- Specifications a separate engineering team builds from without rework, holding technical authority through the specification rather than line management

- Zero Trust architecture for AI workloads and agents , non-human identity, LLM API egress control, and segmentation of AI platforms and the data fabric

**Preferred Qualifications:**

- Recognised architecture certification such as SABSA or TOGAF

- Zero Trust programme at enterprise scale, including the organisational resistance it attracts

- Regulated industry experience, including GxP environments where a routine network control can affect validated systems

- Technical evaluation of new network and Zero Trust tool proposals against the architecture model (vendor selection sits with Product Management), including automation of policy enforcement and network change

- Experience retiring a legacy remote-access estate , VPN concentrators and jump hosts , onto ZTNA without a change freeze

For more fresh new jobs, check out [yubhub.co](https://yubhub.co/).

## Skills

### Required
- AI for Cybersecurity
- Application Security
- Cloud Security
- Computer Programming
- Data Security
- Identity Access Management (IAM)
- Identity Resolution
- Information Systems
- Infrastructure Security
- ML Security
- Network Segmentation
- Operating Systems Security
- Scripting
- Security Engineering
- Security Technologies
- Security Testing
- Vulnerability Management
- Zero Trust
- Zero Trust Architecture

### Nice to have
- SABSA
- TOGAF
- Zero Trust programme at enterprise scale
- Regulated industry experience
- Technical evaluation of new network and Zero Trust tool proposals

---

Source: [Apply at gsk.wd5.myworkdayjobs.com](https://gsk.wd5.myworkdayjobs.com/en-US/GSKCareers/job/Bengaluru-Luxor-North-Tower/Director---Security-Architecture---Solution-Engineering---Network---Zero-Trust-Architecture_449967?utm_source=yubhub.co&utm_medium=jobs_feed&utm_campaign=apply)