Security Architect (Zero Trust) - DV Cleared

We are seeking a highly experienced Security Architect with a strong focus on Zero Trust Architecture (ZTA) to design, implement and evolve secure enterprise environments. You will lead security transformation initiatives, develop enterprise-wide security strategies, and implement identity-centric security architectures aligned with modern Zero Trust principles. This role requires deep expertise across identity, cloud, infrastructure and cyber security domains, ensuring organisations remain resilient against evolving cyber threats whilst meeting security requirements., * Define and deliver enterprise-wide Zero Trust strategies and roadmaps

• Design Zero Trust architectures aligned to NIST 800-207 principles
• Implement identity-first security models across users, devices, applications and data
• Develop continuous verification and adaptive access control frameworks
• Lead micro-segmentation and least privilege initiatives across enterprise environments

Security Strategy & Architecture

• Design holistic security architectures incorporating people, process and technology security
• Develop enterprise-wide security strategies aligned with and Defence Security Policy requirements
• Architect defence-in-depth security solutions across network, cloud, endpoint and application layers
• Lead security architecture reviews and technical security assessments
• Develop security standards, reference architectures and design patterns

Identity & Access Management

• Architect and implement enterprise IAM, MFA and Single Sign-On solutions
• Design Conditional Access and Privileged Access Management (PAM) capabilities
• Lead identity governance and administration initiatives
• Develop secure authentication and authorisation frameworks
• Ensure access management aligns with Zero Trust and least privilege principles

Cyber Threat & Risk Management

• Assess cyber threat landscapes and design threat-informed security architectures
• Lead security risk assessments and vulnerability management programmes
• Design incident response, threat intelligence and cyber defence capabilities
• Architect security monitoring, detection and response solutions
• Develop cyber resilience and business continuity frameworks

Cloud & Security Solutions

• Design cloud security architectures across Azure, AWS and hybrid environments
• Architect endpoint protection, DLP and advanced threat protection solutions
• Design application security, API security and secure SDLC integration
• Architect Security Operations Centre (SOC) and SIEM capabilities
• Lead security technology evaluation, selection and implementation programmes

Technical Leadership & Governance

• Lead security technical teams and provide architectural mentoring
• Establish security design standards, architecture patterns and governance processes
• Drive technical decision-making through security design reviews
• Document security architecture decisions and design specifications
• Support organisational security transformation programmes

Customer & Stakeholder Engagement

• Act as the subject matter expert for Security Architecture and Zero Trust initiatives
• Present security recommendations to senior leadership and programme stakeholders
• Lead architecture workshops and customer engagement activities
• Communicate complex security concepts to both technical and non-technical audiences

• Minimum 10 years’ experience within Cyber Security and Information Security
• At least 5 years’ experience in a Security Architect position
• Proven experience delivering enterprise-scale Zero Trust transformation programmes
• Strong background within defence, aerospace, government or highly regulated sectors
• Experience leading security transformation and modernisation initiatives

Technical Knowledge

• Deep expertise in Zero Trust Architecture principles and implementation methodologies
• Strong knowledge of NIST 800-207 and modern security architecture frameworks
• Expert understanding of Identity & Access Management technologies
• Experience with Microsoft Entra ID, Conditional Access, PIM and PAM solutions
• Strong understanding of network security, micro-segmentation and secure access technologies
• Proficiency in cloud security across Azure, AWS or equivalent platforms
• Knowledge of security technologies including SIEM, EDR/XDR, DLP, CASB, ZTNA, WAF and Firewalls
• Understanding of cryptography, encryption standards and secure communication protocols
• Familiarity with MOD security requirements, defence standards and accreditation processes
• Knowledge of ISO 27001, NIST CSF and CIS Controls frameworks

Personal Attributes

• Exceptional strategic thinking combined with strong technical depth
• Outstanding communication and stakeholder engagement skills
• Strong problem-solving and analytical capabilities
• Proven ability to influence technical teams and executive stakeholders
• Passion for cyber security innovation and continuous improvement

Desirable Requirements

• Experience delivering Microsoft Zero Trust programmes
• CISSP, CISM, SABSA, TOGAF or equivalent industry certifications
• Microsoft Cybersecurity Architect Expert certification
• AWS Security Specialty or Azure Security Engineer certification
• Experience implementing SASE, SSE or ZTNA technologies
• Knowledge of ITAR compliance and export controls
• Previous DV or SC Clearance
• Armed Forces, Defence or National Security background

• Highly competitive salary and comprehensive benefits package
• Enhanced pension and private medical insurance
• Flexible and hybrid working options
• Professional development and industry certification support
• Opportunity to lead strategic Zero Trust transformation programmes
• Exposure to mission-critical defence and national security projects