Security Architect

Are you an experienced Security Architect looking to work on complex, high-impact projects where security is built into everything from day one?

We're looking for a Security Architect to join a growing technology team delivering secure, cloud-based solutions within highly regulated environments. You'll play a key role in shaping the security architecture of mission-critical platforms, working alongside Software Engineers, DevSecOps Engineers, Infrastructure specialists and Agile delivery teams to ensure solutions are secure, scalable and fit for purpose. The Role

As a Security Architect, you'll be responsible for leading the secure design and delivery of cloud-based platforms, supporting both internal initiatives and customer-facing programmes.

Your responsibilities will include:

• Designing secure architectures for complex systems
• Providing technical leadership on security-focused projects
• Identifying, assessing and managing security risks
• Producing security documentation and evidence to support regulatory compliance
• Developing secure design solutions to mitigate threats and vulnerabilities
• Supporting secure-by-design principles throughout the software development life cycle
• Advising technical teams on security best practice across cloud-native environments
• Working closely with Software Engineering, Infrastructure, DevSecOps and Cyber Security teams to deliver secure solutions

We're interested in Security Architects who enjoy solving difficult technical problems and thrive in collaborative engineering environments.

You'll ideally have experience with:

• Security architecture for cloud-hosted government or highly regulated systems
• Threat modelling using recognised methodologies such as STRIDE
• Kubernetes and DevSecOps security
• Azure and Microsoft 365 security engineering
• Secure-by-design development practices
• Producing high-quality technical documentation and security reports
• Agile delivery methodologies and CI/CD within secure environments
• Security governance and risk management
• Knowledge of government or defence security standards (such as JSP 440, JSP 453/604 or JSP 892) would be advantageous

Security Requirements

Due to the nature of the work, applicants must be eligible to obtain UK Security Clearance.