Cyber Design Lead

Cyber Design Lead

Location: Sheffield

Duration: December - Extension Highly Likely

Work Pattern: 3 days onsite per week

Rate: £(Apply online only) DoE - Day Rate

Clearance: Must be eligible for BPSS

Role Overview

We're looking for a Cyber Design Lead / Design Engineer to own end-to-end solution design across cybersecurity initiatives. You'll produce architecture design documents, high-level designs, architecture patterns, decision records, risk assessments, and technical governance artefacts.

The role requires someone comfortable presenting solutions to Design Authorities, senior stakeholders, and leadership teams, while providing technical leadership across cybersecurity transformation programmes.

Essential Experience

Cyber Security Architecture

Strong cybersecurity background in one or more of:

Identity & Access Management (IAM)

Security Operations & Incident Response

Threat & Vulnerability Management

Cloud Security

Infrastructure Security

Network Security

Application Security

Data Security

Cryptography

Experience working on large-scale IT and cyber transformation programmes.

Strong understanding of both Enterprise Architecture and Solution Architecture.

Ability to communicate complex security concepts to both technical and non-technical stakeholders.

Knowledge of security governance, risk management, threats, vulnerabilities, and incident response.Identity & Access Management

3+ years' experience with HashiCorp Vault (preferably on-prem).

3+ years' experience using Terraform, including development of complex reusable modules.

Strong experience integrating Vault, including:

Secret Engines

Authentication Methods

Reusable integration patterns

Experience troubleshooting and resolving Vault integration issues.

Experience designing or implementing Workload Identity Frameworks.

Able to define and influence enterprise secrets management strategy.IAM Knowledge Areas

Federated Identity Management

Single Sign-On (SSO)

Privileged Access Management (PAM)

Authentication protocols including:

Kerberos

OAuth

SAMLKey Responsibilities

Architecture & Design

Produce and maintain end-to-end solution designs.

Translate business requirements into secure architecture solutions.

Create and maintain architecture decision records.

Identify and manage design deviations and technical debt.

Document and mitigate technical risks and issues.

Ensure solutions are efficient, scalable, and cost-effective.

Promote strong documentation standards and governance.Governance

Present designs through governance and design authority processes.

Ensure architecture artefacts undergo peer review.

Gain approval for patterns, designs, risks, and deviations.Risk Management

Identify, manage, and escalate technical risks.

Define remediation plans.

Understand and explain the impact of design decisions on risk and delivery.Leadership

Provide technical leadership within cybersecurity.

Act as a subject matter expert across programmes.

Lead and mentor architects, engineers, and analysts.

Support programme management activities when required.Preferred Certifications

CISSP

CISM

SABSA

TOGAFTools

Jira

ConfluenceIdeal Candidate

A senior Cyber Architect or Cyber Design Lead with deep IAM and HashiCorp Vault expertise, strong architecture governance experience, and a track record delivering security designs within large enterprise environments, ideally within regulated sectors.

Hays Specialist Recruitment Limited acts as an employment agency for permanent recruitment and employment business for the supply of temporary workers. By applying for this job you accept the T&C's, Privacy Policy and Disclaimers which can be found at (url removed)