Cyber Design Lead

<p class="text-muted mb-3">Cyber Design Lead</p>

<p class="text-muted mb-3">Location: Sheffield</p>

<p class="text-muted mb-3">Duration: December - Extension Highly Likely</p>

<p class="text-muted mb-3">Work Pattern: 3 days onsite per week</p>

<p class="text-muted mb-3">Rate: £(Apply online only) DoE - Day Rate</p>

<p class="text-muted mb-3">Clearance: Must be eligible for BPSS</p>

<p class="text-muted mb-3">Role Overview</p>

<p class="text-muted mb-3">We're looking for a Cyber Design Lead / Design Engineer to own end-to-end solution design across cybersecurity initiatives. You'll produce architecture design documents, high-level designs, architecture patterns, decision records, risk assessments, and technical governance artefacts.</p>

<p class="text-muted mb-3">The role requires someone comfortable presenting solutions to Design Authorities, senior stakeholders, and leadership teams, while providing technical leadership across cybersecurity transformation programmes.</p>

<p class="text-muted mb-3">Essential Experience</p>

<p class="text-muted mb-3">Cyber Security Architecture</p>

<p class="text-muted mb-3">Strong cybersecurity background in one or more of:</p>

<p class="text-muted mb-3">Identity & Access Management (IAM)</p>

<p class="text-muted mb-3">Security Operations & Incident Response</p>

<p class="text-muted mb-3">Threat & Vulnerability Management</p>

<p class="text-muted mb-3">Cloud Security</p>

<p class="text-muted mb-3">Infrastructure Security</p>

<p class="text-muted mb-3">Network Security</p>

<p class="text-muted mb-3">Application Security</p>

<p class="text-muted mb-3">Data Security</p>

<p class="text-muted mb-3">Cryptography</p>

<p class="text-muted mb-3">Experience working on large-scale IT and cyber transformation programmes.</p>

<p class="text-muted mb-3">Strong understanding of both Enterprise Architecture and Solution Architecture.</p>

<p class="text-muted mb-3">Ability to communicate complex security concepts to both technical and non-technical stakeholders.</p>

<p class="text-muted mb-3">Knowledge of security governance, risk management, threats, vulnerabilities, and incident response.Identity & Access Management</p>

<p class="text-muted mb-3">3+ years' experience with HashiCorp Vault (preferably on-prem).</p>

<p class="text-muted mb-3">3+ years' experience using Terraform, including development of complex reusable modules.</p>

<p class="text-muted mb-3">Strong experience integrating Vault, including:</p>

<p class="text-muted mb-3">Secret Engines</p>

<p class="text-muted mb-3">Authentication Methods</p>

<p class="text-muted mb-3">Reusable integration patterns</p>

<p class="text-muted mb-3">Experience troubleshooting and resolving Vault integration issues.</p>

<p class="text-muted mb-3">Experience designing or implementing Workload Identity Frameworks.</p>

<p class="text-muted mb-3">Able to define and influence enterprise secrets management strategy.IAM Knowledge Areas</p>

<p class="text-muted mb-3">Federated Identity Management</p>

<p class="text-muted mb-3">Single Sign-On (SSO)</p>

<p class="text-muted mb-3">Privileged Access Management (PAM)</p>

<p class="text-muted mb-3">Authentication protocols including:</p>

<p class="text-muted mb-3">Kerberos</p>

<p class="text-muted mb-3">OAuth</p>

<p class="text-muted mb-3">SAML</p>

<h5 class="fw-bold text-success mt-4 mb-3">Key Responsibilities</h5>

<p class="text-muted mb-3">Architecture & Design</p>

<p class="text-muted mb-3">Produce and maintain end-to-end solution designs.</p>

<p class="text-muted mb-3">Translate business</p>

<h5 class="fw-bold text-success mt-4 mb-3">requirements into secure architecture solutions.</h5>

<p class="text-muted mb-3">Create and maintain architecture decision records.</p>

<p class="text-muted mb-3">Identify and manage design deviations and technical debt.</p>

<p class="text-muted mb-3">Document and mitigate technical risks and issues.</p>

<p class="text-muted mb-3">Ensure solutions are efficient, scalable, and cost-effective.</p>

<p class="text-muted mb-3">Promote strong documentation standards and governance.Governance</p>

<p class="text-muted mb-3">Present designs through governance and design authority processes.</p>

<p class="text-muted mb-3">Ensure architecture artefacts undergo peer review.</p>

<p class="text-muted mb-3">Gain approval for patterns, designs, risks, and deviations.Risk Management</p>

<p class="text-muted mb-3">Identify, manage, and escalate technical risks.</p>

<p class="text-muted mb-3">Define remediation plans.</p>

<p class="text-muted mb-3">Understand and explain the impact of design decisions on risk and delivery.Leadership</p>

<p class="text-muted mb-3">Provide technical leadership within cybersecurity.</p>

<p class="text-muted mb-3">Act as a subject matter expert across programmes.</p>

<p class="text-muted mb-3">Lead and mentor architects, engineers, and analysts.</p>

<p class="text-muted mb-3">Support programme management activities when required.Preferred Certifications</p>

<p class="text-muted mb-3">CISSP</p>

<p class="text-muted mb-3">CISM</p>

<p class="text-muted mb-3">SABSA</p>

<p class="text-muted mb-3">TOGAFTools</p>

<p class="text-muted mb-3">Jira</p>

<p class="text-muted mb-3">ConfluenceIdeal Candidate</p>

<p class="text-muted mb-3">A senior Cyber Architect or Cyber Design Lead with deep IAM and HashiCorp Vault expertise, strong architecture governance experience, and a track record delivering security designs within large enterprise environments, ideally within regulated sectors.</p>

<p class="text-muted mb-3">Hays Specialist Recruitment Limited acts as an employment agency for permanent recruitment and employment business for the supply of temporary workers. By applying for this job you accept the T&C's, Privacy Policy and Disclaimers which can be found at (url removed)</p>