> Markdown version of [/jobs/ext/2806381-security-architect](https://www.wearedevelopers.com/jobs/ext/2806381-security-architect). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md).

---

# Security Architect

- **Company:** Indra Group UK & Ireland
- **Location:** Greater London, UK (Remote available)
- **Contract:** Permanent contract
- **Skills:** Adobe InDesign, Amazon Web Services, Systems Engineering, Microsoft Azure, Cyber Security, DevOps, Identity and Access Management, Issue Tracking Systems, Information Systems Security Architecture Professional, Network Protocols, Cloud Services, Secure Coding, Security Information and Event Management, Software Engineering, Systems Architecture, Software Vulnerability Management, Google Cloud, Software Security, Information Technology, Devsecops
- **Published:** September 9, 2026
- **Apply:** https://www.collegerecruiter.com/job/2856365827-security-architect

## About the Role

* Academic background or equivalent professional experience in a relevant discipline
 * Professional certification in Information Security (e.g. CISSP, CISM, CISA, CCSP or equivalent)
 * Ability to operate in environments requiring mobility, where applicable, * Technical degree in fields such as Computer Science, Engineering, Mathematics or similar
 * Certifications related to security architecture, privacy or governance frameworks
 * Familiarity with recognised methodologies or best practices (e.g. IT service management, project frameworks)
 * Vendor or cloud-related certifications in security or infrastructure, * Proven track record in defining and implementing security architectures or contributing to security design at system or enterprise level
 * Experience working across the full system or software lifecycle, including secure development and integration practices
 * Exposure to security governance, risk management, and compliance activities within complex environments
 * Solid understanding of enterprise IT ecosystems, including infrastructure, networking and systems

Technical Knowledge

 * Familiarity with commonly adopted security frameworks, standards, and regulations (e.g. ISO 27001, NIST, data protection regulations)
 * Understanding of network protocols, system architectures and core infrastructure components
 * Awareness of modern approaches such as DevSecOps and secure-by-design principles, * Experience working with cloud platforms and their associated security models (e.g. Azure, AWS, GCP)
 * Knowledge of specialised domains such as application security, identity and access management, or cryptography
 * Exposure to regulated environments, audit processes, or industry-specific compliance standards
 * Familiarity with security tools and technologies used for monitoring, testing, and protection (e.g. SIEM, vulnerability management, endpoint security)
 * Understanding of development environments, tooling, and security testing practices
 * Awareness of quality standards and structured assurance processes

## Description

customer service centres, and 24 river boat boarding points. Drawing on over 30 years of experience in urban public transport solutions, Indra will manage and evolve all aspects of the system. The project also envisages, in partnership with TfL, the implementation of new technologies to develop the system, make it more efficient and automate key processes; in short, to jointly create the next generation of the ticketing system for London., The Security Architect is responsible for defining, guiding, and assuring the implementation of security architecture and cyber resilience control across a range of systems, platforms, and services. This role provides strategic and technical security expertise to support the design, development, and delivery solutions, working closely with engineering teams, project stakeholders, and business units., * Support the definition and integration of security requirements within projects, ensuring alignment with business needs and industry best practices

 * Provide security architecture guidance for the design and evolution of cloud services, applications, back-office systems, and infrastructure solutions
 * Contribute to the assessment and management of security risks, supporting activities such as risk analysis, impact assessments, and audits when required
 * Collaborate with multidisciplinary teams (e.g. DevOps, system engineering, development, and project management) to promote secure-by-design principles across all phases of delivery.
 * Advise on the implementation of appropriate security controls (technical, procedural, and organisational) to ensure the protection of systems and data.
 * Support governance activities, including participation in design reviews, project checkpoints, and change management processes from a security perspective.
 * Promote best practices and continuous improvement in information security, contributing to the adoption of standards, frameworks, and emerging technologies
 * Ensure that security considerations are appropriately documented and communicated to relevant stakeholders.
 * Support the definition of processes that enable secure system operation, maintenance, and service transition.
 * Ensure compliance with organisational policies, standards, and applicable regulatory requirements


## Related Videos

- [Security Pitfalls for Software Engineers](https://www.wearedevelopers.com/videos/726-security-pitfalls-for-software-engineers)
- [From DevOps to Scaled DevOps: How We’re Rebuilding Continuous Delivery as a Platform](https://www.wearedevelopers.com/videos/100018-from-devops-to-scaled-devops-how-we-re-rebuilding-continuous-delivery-as-a-platform)
- [The Cloud is Calling: Answer with In-Demand Skills](https://www.wearedevelopers.com/videos/945-the-cloud-is-calling-answer-with-in-demand-skills)
- [DevSecOps: Injecting Security into Mobile CI/CD Pipelines](https://www.wearedevelopers.com/videos/273-devsecops-injecting-security-into-mobile-ci-cd-pipelines)
- [DevSecOps: Security in DevOps](https://www.wearedevelopers.com/videos/36-devsecops-security-in-devops)
- [DevSecOps culture](https://www.wearedevelopers.com/videos/783-devsecops-culture)

## Related Articles

- [Events like RSAC Get You CISOs. Developers Decide What Actually Gets Deployed.](https://www.wearedevelopers.com/magazine/693-events-like-rsac-get-you-cisos-developers-decide-what-actually-gets-deployed)
- [The 12 Best Jobs for Software Engineers](https://www.wearedevelopers.com/magazine/401-the-12-best-jobs-for-software-engineers)
- [What Are The Top Skills Required For Azure Developers?](https://www.wearedevelopers.com/magazine/77-what-are-the-top-skills-required-for-azure-developers)
- [Top-Paying Tech Jobs (with Salaries)](https://www.wearedevelopers.com/magazine/372-top-paying-tech-jobs-with-salaries)
- [Understanding and Mitigating Common Web Vulnerabilities](https://www.wearedevelopers.com/magazine/565-understanding-and-mitigating-common-web-vulnerabilities)
- [The Most Popular IT Jobs on the Market](https://www.wearedevelopers.com/magazine/376-the-most-popular-it-jobs-on-the-market)