Security Architect

We are seeking experienced Security Architects to support our public sector and enterprise clients in delivering secure digital services and technology transformation initiatives. The role involves engaging with multiple stakeholders to understand business objectives, identify security risks, and design security architectures that enable the safe delivery of business outcomes. You will work closely with solution architects, engineering teams, delivery managers, and client leadership to ensure that security is embedded by design and aligned with organisational risk appetites.

Responsibilities

Design end-to-end security architectures that align with business, technical, regulatory, and security requirements; Develop security strategies and controls for cloud-native, hybrid, and on-premise environments; Conduct security architecture reviews and provide recommendations to mitigate identified risks; Translate business and technical requirements into secure, scalable, and resilient designs; Ensure alignment with enterprise security architecture, governance frameworks, and organisational standards; Support Agile delivery teams by embedding security-by-design principles throughout the software development lifecycle; Define and document security patterns, reference architectures, and reusable security artefacts; Lead threat modelling activities and identify appropriate mitigation strategies; Collaborate with stakeholders across business, product, operations, and engineering teams to drive secure decision-making; Advise on identity and access management approaches, including authentication, authorisation, and privileged access controls; Ensure security, privacy, compliance, and risk management requirements are incorporated into solutions; Support security assurance activities, including risk assessments, security testing, and accreditation processes; Contribute to DevSecOps initiatives, promoting automation and continuous security practices; Produce clear architectural documentation, including security views, high-level designs, and security artefacts; Mentor junior team members and contribute to the development of the wider Security Practice

Requirements

Extensive experience engaging with stakeholders at all levels, including senior leadership and C-suite executives; Proven experience operating within client-facing and/or consultancy environments; Demonstrated experience designing and implementing enterprise security architectures; Strong understanding of security architecture methodologies and frameworks; Experience conducting threat modelling and security risk assessments; Experience supporting security assurance activities within regulated environments; Proven ability to balance security requirements with operational and business objectives; Experience designing secure architectures across cloud and hybrid environments; Strong understanding of security controls for applications, infrastructure, data, and identity; Experience working within Agile delivery environments and integrating security into delivery processes; Experience supporting compliance initiatives involving standards and regulatory frameworks; Advanced knowledge of cloud security across Microsoft Azure, AWS, Google Cloud Platform (GCP), and Microsoft 365; Expertise in Zero Trust security principles and secure-by-design methodologies; Strong understanding of identity and access management technologies, including federation, SSO, MFA, and privileged access management; Experience with threat modelling methodologies such as STRIDE, PASTA, or equivalent; Knowledge of security frameworks and standards including ISO 27001, NIST Cybersecurity Framework, NIST 800-53, CIS Controls, SABSA, TOGAF; Understanding of security operations concepts, incident response, and detection capabilities; Knowledge of application security principles, including secure coding practices and OWASP guidance; Experience with DevSecOps practices and security automation; Familiarity with container and Kubernetes security; Understanding of encryption, key management, and data protection principles; Strong documentation, communication, and stakeholder management skills

Nice to have

Familiarity with public sector security requirements and accreditation approaches

Benefits

Competitive Salary; Bonus Scheme; Private Healthcare Insurance; 25 Days Annual Leave + Bank Holidays; Up to 10 days allocated for development training per year; Enhanced Parental Leave; Paid Fertility Leave (5 Days); Statutory & Contributory Pension; EAP with Help@Hand; Gym Membership Benefits; Cycle to Work and Electric Vehicle schemes; Flexible Working; Annual Away Days/Company Socials