> Markdown version of [/jobs/ext/1981787-security-architect-ot-it-network-and-physical](https://www.wearedevelopers.com/jobs/ext/1981787-security-architect-ot-it-network-and-physical). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md). --- # Security Architect (OT, IT, Network and Physical) - **Company:** Expleo - **Location:** Bristol, UK - **Contract:** Permanent contract - **Skills:** Systems Engineering, Configuration Management, Cyber Security, Digital Technology, Identity and Access Management, Network Security, Network Architecture, Sherwood Applied Business Security Architecture, Subsystems, Togaf - **Published:** August 8, 2026 - **Apply:** https://itjobpro.co.uk/job/security-architect-ot-it-network-and-physical ## About the Role Relevant education or industry-recognised certifications in security architecture, cybersecurity, secure engineering, operational technology security or a related discipline. Suitable qualifications may include BSc, MSc, CISSP, CISM, CRISC, CCP, ISA/IEC 62443 (Fundamentals Specialist, Risk Assessment Specialist, Design Specialist or Expert), SABSA, TOGAF, CCNP, OSCP, ISO 27001 Lead Implementer/Lead Auditor or equivalent professional experience. Experience working within UK MOD, defence, maritime, shipbuilding, naval, critical national infrastructure or operationally critical environments would be highly beneficial ## Description As part of the Expleo UK Cybersecurity Practice, you will define and ensure the security architecture for a major UK defence maritime programme, supporting an autonomous surface vessel capability that is being matured towards a whole-ship system design review. This is a hands-on architecture role for an engineer who is comfortable designing across operational technology, IT, networks, and physical security, and who can serve as a design lead to naval architects, systems engineers, a digital system integrator, and subsystem owners. Because the platform is designed to operate crewless, the architecture must be fail-safe under compromise and maintain a defined minimum-risk state upon loss of the remote command-and-control link. You will own the security architecture and the asset baseline that underpins it, working to the Security Management Plan set by the Secure by Design lead and providing architectural evidence to support formal design review. The role requires strong secure-by-design architectural skills, deep IT and OT understanding, and the ability to translate risk and consequences into segmentation, controls, and defensible design decisions. Develop the security architecture for OT and IT in coordination with the digital system integrator and sub-system owners, and produce the preliminary security architecture design. Partition the platform into zones and conduits in accordance with IEC 62443, setting target security levels based on safety and mission consequences. Review the network architecture and communications security, and provide advice, including on the resilience of remote command-and-control links and of position, navigation, and timing. Produce the network security architecture in coordination with the digital teams. Review the physical security provision in the design and develop appropriate protection measures, producing the physical security design in coordination with the arrangement team. Define trust boundaries, segregation, secure configuration baselines, identity and access management, and secure remote access requirements for shipboard and supporting systems. Build and structure the initial asset register for configuration control, capturing criticality, zone, ownership and dependency attributes. Support threat modelling and security risk assessment from an architecture perspective, and translate assessed risk into architectural controls. Define architecture-level security requirements and maintain their traceability into the wider requirements specification. Assure that architectural controls are fail-safe and do not defeat safety functions, working alongside safety and engineering colleagues. Provide architectural evidence and materials for internal and external design reviews, including system design reviews, and close out resulting actions. Contribute to supplier and interface security requirements where these bear on the architecture, including third-party payload and control-system interfaces. Produce clear high- and low-level design material, architecture views, decision records and design rationale suitable for technical scrutiny. ## Related Videos - [10M Data Records Lost, Underwater Computing, and Psychedelic Fish - Matthias Geniar](https://www.wearedevelopers.com/videos/1908-10m-data-records-lost-underwater-computing-and-psychedelic-fish-matthias-geniar) - [Thinking Differently - How to Make Money from Cyber Attacks & Cheats](https://www.wearedevelopers.com/videos/745-thinking-differently-how-to-make-money-from-cyber-attacks-cheats) - [Security Pitfalls for Software Engineers](https://www.wearedevelopers.com/videos/726-security-pitfalls-for-software-engineers) - [What makes Cybersecurity different for critical infrastructure?](https://www.wearedevelopers.com/videos/571-what-makes-cybersecurity-different-for-critical-infrastructure) - [Cyber Security: Small, and Large!](https://www.wearedevelopers.com/videos/259-cyber-security-small-and-large) - [Develop on Windows, Deploy on Red Hat Enterprise Linux](https://www.wearedevelopers.com/videos/1600-develop-on-windows-deploy-on-red-hat-enterprise-linux) ## Related Articles - [Events like RSAC Get You CISOs. Developers Decide What Actually Gets Deployed.](https://www.wearedevelopers.com/magazine/693-events-like-rsac-get-you-cisos-developers-decide-what-actually-gets-deployed) - [9 Ways to Make Money Hacking](https://www.wearedevelopers.com/magazine/333-9-ways-to-make-money-hacking) - [The 12 Best Jobs for Software Engineers](https://www.wearedevelopers.com/magazine/401-the-12-best-jobs-for-software-engineers) - [Is Software Engineering Over-Saturated?](https://www.wearedevelopers.com/magazine/418-is-software-engineering-over-saturated) - [IT Salaries in UK](https://www.wearedevelopers.com/magazine/288-it-salaries-in-uk) - [Understanding and Mitigating Common Web Vulnerabilities](https://www.wearedevelopers.com/magazine/565-understanding-and-mitigating-common-web-vulnerabilities)