Security Architect - DV Cleared

An experienced Security Architect and Subject Matter Expert (SME) is required to support the design, build, and assurance of Backend Platform and endpoint protection and vulnerability management capabilities within secure, offline (air-gapped) environments.

The Architect must apply the NIST Cybersecurity Framework and MoD security policies to the Back End platform, while supporting the Security and Infrastructure teams in designing and implementing security controls across the infrastructure and end-user endpoints.

The role will provide specialist expertise in the delivery of Security controls, AntiVirus and Vulnerability Management platforms in support of a UK Government secure account. The successful candidate will operate within high-assurance environments, ensuring compliance with MOD security policies and national cyber security standards, while engaging directly with stakeholders across customer sites., * Design and implement endpoint security solutions, including AntiVirus/EDR, vulnerability management, and platform security controls.

• Deliver secure solutions for air-gapped environments, including patching, signature updates, and secure data transfer.
• Ensure compliance with MOD, NCSC, JSP and NIST security standards.
• Develop vulnerability management processes, security assurance activities, and accreditation documentation.
• Produce HLDs, LLDs, security documentation, SOPs, and penetration testing scope.
• Collaborate with infrastructure and security teams to deliver secure, compliant solutions.

• Proven Security Architect or senior Security SME experience within Defence or other regulated environments.
• Strong knowledge of endpoint security, EDR, vulnerability management, and platform hardening.
• Experience designing secure solutions for offline/air-gapped networks.
• Excellent understanding of MOD security policies, NCSC guidance, JSP 440/604, Secure by Design, and the NIST Cybersecurity Framework.
• Experience supporting security assurance, risk management, and accreditation activities.
• Strong stakeholder engagement and technical documentation skills.

Desirable

• Defence or Aerospace sector experience.
• Experience working within classified or high-assurance environments.
• Incident response and secure network experience.