Network Security Architect
Talent Smart
Sheffield, United Kingdom
2 days ago
Role details
Contract type
Temporary contract Employment type
Full-time (> 32 hours) Working hours
Regular working hours Languages
EnglishJob location
Sheffield, United Kingdom
Tech stack
Applications Architecture
Confluence
JIRA
Computer Security
Network Security
Network Architecture
Network Planning and Design
Network Intrusion Detection Systems
Network Segmentation
Systems Development Life Cycle
Sherwood Applied Business Security Architecture
Software Engineering
UML
Software Security
Togaf
Information Technology
Api Gateway
Ddos
Job description
You will own and produce reference architecture for application and network security, with a strong focus on network segmentation, application protection, and security controls. Working closely with CTO teams, security architecture, engineering, and regulatory stakeholders, you will ensure solutions are secure, compliant, and fit for purpose from design through to delivery.
Requirements
You will be comfortable operating at senior level, presenting designs at design authorities, and providing technical thought leadership across multiple programmes.
Essential Experience
- Strong application architecture background (standards, patterns, designs) - must-have
- Software development background with solid understanding of network architecture and security
- Experience combining application architecture and network security architecture
- Financial services experience, ideally within regulated environments (eg retail banking, hedge funds, challenger banks)
- Proven experience producing high-quality architecture documentation (standards, patterns, roadmaps)
- Strong communication and stakeholder engagement skills, including interaction with regulatory bodies
- Deep knowledge of security frameworks such as NIST, SANS, ITU
- Experience with threat modelling, risk assessment, and audit support
Technical Focus
- Application security, SDLC and lower-environment security
- Network and application segmentation (including micro-segmentation)
- Zone-based network design and secure migration from Legacy architectures
- Inter- and intra-zone controls:WAAP, NGFWs, NIPS/NIDS, DDoS, API gateways, reverse proxies, AuthN/AuthZ
Tools and Platforms
- Legacy and modern networking infrastructure
- Architecture modelling tools (BizzDesign, Archi, UML)
- Jira and Confluence
Qualifications (preferred)
- Degree in Cybersecurity, Computer Science, Software Engineering or similar
- SABSA, TOGAF, or equivalent architecture certifications
- Network infrastructure and application security certifications (eg CEH)