Security Architect

<p class="text-muted mb-3">I am currently looking for a Security Architect on a 12 month contract in Gloucestershire.</p>

<p class="text-muted mb-3">Job Title: Security Architect – Cloud, On-Premise & Secure Systems Architecture</p>

<p class="text-muted mb-3">Rate: £90-110 per hour Inside IR35 (dependant on experience)</p>

<p class="text-muted mb-3">Contract: 12 mths</p>

<p class="text-muted mb-3">Work Pattern: Hybrid</p>

<p class="text-muted mb-3">Clearance: Suitable candidates must have active eDV clearance. We will not be able to consider candidates who do not have this level of clearance.</p>

<p class="text-muted mb-3">I am looking for an experienced Security Architect to lead the design, assurance and continual improvement of secure technology solutions across cloud, hybrid and on-premise environments. This role will be responsible for embedding security throughout the full technology lifecycle, supporting cloud adoption, cloud systems engineering, digital transformation programmes and enterprise platforms.</p>

<p class="text-muted mb-3">Working with architecture, engineering, infrastructure, security and delivery teams, you will provide technical leadership to ensure solutions align with Secure by Design principles, organisational risk appetite, regulatory</p>

<h5 class="fw-bold text-success mt-4 mb-3">requirements and industry best practice. Experience with cryptographic services and key management is advantageous but not essential.</h5>

<h5 class="fw-bold text-success mt-4 mb-3">Key Responsibilities</h5>

<p class="text-muted mb-3">Security Architecture & Cloud Systems Engineering</p>

<p class="text-muted mb-3">Design and assure secure architectures across cloud, hybrid and on-premise environments.</p>

<p class="text-muted mb-3">Develop security architecture principles, standards, patterns and reference architectures.</p>

<p class="text-muted mb-3">Embed security</p>

<h5 class="fw-bold text-success mt-4 mb-3">requirements within platform, infrastructure and application architectures.</h5>

<p class="text-muted mb-3">Review solution designs to ensure appropriate security controls are implemented throughout the system lifecycle.</p>

<p class="text-muted mb-3">Support secure cloud adoption, modernisation and digital transformation initiatives.</p>

<p class="text-muted mb-3">Provide expert guidance across infrastructure, applications, networks, platforms and data services.</p>

<p class="text-muted mb-3">Ensure solutions meet</p>

<h5 class="fw-bold text-success mt-4 mb-3">requirements for confidentiality, integrity, availability, resilience and recoverability.</h5>

<p class="text-muted mb-3">Support the design of complex, distributed and mission-critical systems.</p>

<p class="text-muted mb-3">Security Assurance & Risk Management</p>

<p class="text-muted mb-3">Conduct security architecture reviews, threat modelling and risk assessments.</p>

<p class="text-muted mb-3">Identify security risks, vulnerabilities and technical debt, recommending appropriate mitigations.</p>

<p class="text-muted mb-3">Support risk-based decision making across programmes and enterprise initiatives.</p>

<p class="text-muted mb-3">Define security</p>

<h5 class="fw-bold text-success mt-4 mb-3">requirements, control objectives and acceptance criteria.</h5>

<p class="text-muted mb-3">Contribute to security assurance, accreditation and compliance activities.</p>

<p class="text-muted mb-3">Ensure designs align with security policies, standards and regulatory obligations.</p>

<p class="text-muted mb-3">Cloud Security & Platform Architecture</p>

<p class="text-muted mb-3">Provide security oversight across public cloud, private cloud and hybrid cloud platforms.</p>

<p class="text-muted mb-3">Assess cloud-native services, Infrastructure as Code (IaC), container platforms and modern application architectures.</p>

<p class="text-muted mb-3">Support secure migration from legacy environments to cloud-hosted solutions.</p>

<p class="text-muted mb-3">Develop security patterns covering identity and access management (IAM), privileged access, network segmentation, platform security, logging, monitoring and resilience.</p>

<p class="text-muted mb-3">Evaluate emerging technologies and provide recommendations for secure adoption.</p>

<p class="text-muted mb-3">Architecture Governance & Technical Leadership</p>

<p class="text-muted mb-3">Contribute to security architecture strategy, roadmaps and target-state architectures.</p>

<p class="text-muted mb-3">Participate in design authorities, architecture review boards and governance activities.</p>

<p class="text-muted mb-3">Develop reusable security patterns and guidance for engineering teams.</p>

<p class="text-muted mb-3">Lead security reviews relating to major technology change and transformation programmes.</p>

<p class="text-muted mb-3">Balance security, operational and business</p>

<h5 class="fw-bold text-success mt-4 mb-3">requirements when making architectural decisions.</h5>

<p class="text-muted mb-3">Stakeholder Engagement</p>

<p class="text-muted mb-3">Collaborate with Enterprise Architects, Solution Architects, Cloud Engineers, Infrastructure Teams and Delivery Managers.</p>

<p class="text-muted mb-3">Communicate security risks and recommendations to both technical and non-technical stakeholders.</p>

<p class="text-muted mb-3">Build strong relationships across technology and programme teams.</p>

<p class="text-muted mb-3">Promote secure design principles and architectural best practice.</p>

<p class="text-muted mb-3">Mentor architects and engineers in secure systems design.</p>

<p class="text-muted mb-3">Continuous Improvement</p>

<p class="text-muted mb-3">Keep up to date with developments in cloud computing, platform engineering, infrastructure security and emerging technologies.</p>

<p class="text-muted mb-3">Contribute to the enhancement of security standards, architecture frameworks and governance processes.</p>

<p class="text-muted mb-3">Share knowledge and best practice across security, architecture and engineering communities.</p>

<p class="text-muted mb-3">Support ongoing improvements in security assurance and systems engineering practices.</p>

<p class="text-muted mb-3">Essential Skills & Experience</p>

<p class="text-muted mb-3">Proven experience as a Security Architect within complex enterprise, government, defence or highly regulated environments.</p>

<p class="text-muted mb-3">Strong knowledge of cloud architecture and cloud security across IaaS, PaaS and SaaS platforms.</p>

<p class="text-muted mb-3">Experience with hybrid and on-premise infrastructure architectures.</p>

<p class="text-muted mb-3">Strong understanding of secure system design, security architecture patterns and security controls.</p>

<p class="text-muted mb-3">Experience conducting threat modelling, security architecture reviews and risk assessments.</p>

<p class="text-muted mb-3">Ability to support and influence risk-based decision making at programme and enterprise level.</p>

<p class="text-muted mb-3">Experience developing architecture standards, governance frameworks and security patterns.</p>

<p class="text-muted mb-3">Knowledge of networking, identity and access management (IAM), platform security and security monitoring.</p>

<p class="text-muted mb-3">Excellent stakeholder management, communication and influencing skills.</p>

<p class="text-muted mb-3">Desirable Skills & Experience</p>

<p class="text-muted mb-3">Experience with Cloud Systems Engineering and Model-Based Systems Engineering (MBSE).</p>

<p class="text-muted mb-3">Experience supporting cloud migration and digital transformation programmes.</p>

<p class="text-muted mb-3">Knowledge of Zero Trust architectures and modern enterprise security frameworks.</p>

<p class="text-muted mb-3">Experience working within MOD, Defence Digital, Government or National Security environments.</p>

<p class="text-muted mb-3">Understanding of cryptographic services, PKI, key management systems and Hardware Security Modules (HSMs).</p>

<p class="text-muted mb-3">Relevant certifications such as CISSP, SABSA, CCSK, CCSP, TOGAF, Azure Security Engineer, AWS Security Specialty or equivalent</p>