> Markdown version of [/jobs/ext/2041050-security-architect](https://www.wearedevelopers.com/jobs/ext/2041050-security-architect). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md).

---

# Security Architect

- **Company:** Sky UK
- **Location:** UK
- **Contract:** Permanent contract
- **Skills:** Amazon Web Services, Microsoft Azure, Cloud Computing Security, Cyber Security, PCI Data Security Standards, Zero Trust Network Access, Sherwood Applied Business Security Architecture, Google Cloud, Togaf, Devsecops
- **Published:** August 13, 2026
- **Apply:** https://jobs.theguardian.com/job/10172959/security-architect/

## About the Role

* Hands-on experience conducting architecture risk assessments and creation of business cases.

 * Practical experience developing or applying security architecture patterns, standards, and reference architectures.

 * Knowledge of cloud security architectures across platforms such as Microsoft Azure, AWS, or Google Cloud is desirable.

 * Understanding of DevSecOps, automation, and modern software delivery practices is desirable.

 * Experience supporting regulatory requirements such as NIS2, PCI DSS, GDPR, SOX, or similar frameworks.

 * Relevant industry certifications such as CISSP, SABSA, TOGAF, CCSP, Azure Security Engineer, or equivalent qualifications is desirable.

## Description

The Security Architect is responsible for ensuring that technology solutions are designed and implemented in a secure, resilient, and risk-aware manner. They provide expert guidance on security architecture, influence technology strategy, and enable the business to achieve its objectives while managing cyber risk in line with organisational policies, standards, and regulatory obligations.

What you'll do

 * Produce, review, and assure solution and technical designs for services, platforms, and applications. Identify security risks, weaknesses, and architectural gaps, and work collaboratively with stakeholders to address them through approved security patterns, standards, and principles.

 * Ensure technologies are integrated effectively, fit for purpose, resilient, and aligned with security standards, regulatory requirements, and industry best practice.

 * Maintain awareness of emerging technology trends, security threats, and industry developments. Provide expert advice on security implications and opportunities, ensuring new technologies are adopted securely and deliver business value.

 * Support the business in making informed risk-based decisions, clearly documenting risk assessments, architectural decisions, assumptions, and trade-offs to provide transparency and accountability.

 * Build and maintain strong relationships with technology teams, business stakeholders, suppliers, and external partners to support the successful delivery of cyber security services, programmes, and initiatives.

 * Define, develop, and maintain security architecture standards, patterns, blueprints, and reference architectures

 * Ensure solutions align with organisational security policies, regulatory obligations, and industry frameworks including ISO 27001, NIS2, PCI DSS, and Zero Trust principles where applicable.


## Related Videos

- [You can’t hack what you can’t see](https://www.wearedevelopers.com/videos/41-you-can-t-hack-what-you-can-t-see)
- [The Cloud is Calling: Answer with In-Demand Skills](https://www.wearedevelopers.com/videos/945-the-cloud-is-calling-answer-with-in-demand-skills)
- [DevSecOps: Injecting Security into Mobile CI/CD Pipelines](https://www.wearedevelopers.com/videos/273-devsecops-injecting-security-into-mobile-ci-cd-pipelines)
- [Security Pitfalls for Software Engineers](https://www.wearedevelopers.com/videos/726-security-pitfalls-for-software-engineers)
- [DevSecOps: Security in DevOps](https://www.wearedevelopers.com/videos/36-devsecops-security-in-devops)
- [DevSecOps culture](https://www.wearedevelopers.com/videos/783-devsecops-culture)

## Related Articles

- [What Are The Top Skills Required For Azure Developers?](https://www.wearedevelopers.com/magazine/77-what-are-the-top-skills-required-for-azure-developers)
- [Events like RSAC Get You CISOs. Developers Decide What Actually Gets Deployed.](https://www.wearedevelopers.com/magazine/693-events-like-rsac-get-you-cisos-developers-decide-what-actually-gets-deployed)
- [Understanding and Mitigating Common Web Vulnerabilities](https://www.wearedevelopers.com/magazine/565-understanding-and-mitigating-common-web-vulnerabilities)
- [Why Upskilling And Reskilling is Important For Developers](https://www.wearedevelopers.com/magazine/428-why-upskilling-and-reskilling-is-important-for-developers)
- [Data Engineer Salary UK](https://www.wearedevelopers.com/magazine/253-data-engineer-salary-uk)
- [The 12 Best Jobs for Software Engineers](https://www.wearedevelopers.com/magazine/401-the-12-best-jobs-for-software-engineers)