> Markdown version of [/jobs/ext/2951668-security-architect](https://www.wearedevelopers.com/jobs/ext/2951668-security-architect). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md). --- # Security Architect - **Company:** SouthernWaterServices - **Location:** Durrington, UK - **Salary:** £74,566.0 - **Contract:** Permanent contract - **Skills:** Software System Penetration Testing, Microsoft Azure, Encodings, Cyber Security, Digital Architecture, Identity and Access Management, Key Management, Network Security, Sherwood Applied Business Security Architecture, Software Vulnerability Management, Data Logging, Software Security, Process Control Systems, Operational Systems, Vulnerability Analysis - **Published:** September 17, 2026 - **Apply:** https://www.adzuna.co.uk/jobs/details/5887455447 ## About the Role * Experience designing and assuring secure solutions across Azure, on-premise and hybrid environments. * Strong knowledge of industry frameworks such as NCSC guidance, NIST CSF/800-53, ISO 27001/2 or SABSA. * Understanding of identity & access management, network security, encryption, API security and secrets management. * Experience with vulnerability management, penetration testing and security assurance processes. * Ability to define, document and govern security requirements throughout solution delivery. Desirable: * Knowledge of NIS Regulations and ISA/IEC 62443 for OT and industrial control systems. * Experience working in highly regulated industries such as utilities, energy or critical national infrastructure. * Familiarity with secure operation, monitoring, logging and incident response integration. ## Description Southern Water is undergoing a major digital transformation modernising platforms, strengthening resilience and enhancing cyber security across both IT and operational technology (OT) environments. Our customers and communities rely on us every day, and keeping our systems secure is central to protecting essential services. As our Security Architect, you'll play a pivotal role within our Digital Architecture function. You'll work alongside solution architects, security specialists, engineering teams, platform owners and senior stakeholders, shaping secure-by-design principles from the very beginning of the delivery lifecycle. This is a role where your expertise will directly influence the future of our digital estate and strengthen our security posture across the organisation. What you will be responsible for: * Defining and assuring security architecture for new and evolving solutions across applications, infrastructure, cloud, data, integration and OT environments. * Embedding secure-by-design principles into all technology design and delivery processes. * Translating policy, standards and risk appetite into practical, actionable designs and patterns. * Identifying and advising on security risks, ensuring appropriate mitigation or formal risk acceptance. * Providing expert guidance to architecture forums, governance boards and design authorities. * Supporting solution architects and engineering teams in defining clear security and non-functional requirements. * Leading or contributing to threat modelling, vulnerability assessments and penetration testing activities. Additional requirements specific to the role: * Occasional travel across Southern Water sites and operational locations. * Participation in governance and design authority forums. * Engagement with both IT and OT stakeholders, including regulated and safety-critical environments. ## Related Videos - [A Brief History of Data Storage](https://www.wearedevelopers.com/videos/974-a-brief-history-of-data-storage) - [Crypto-secure Data Management with In-Database Blockchain](https://www.wearedevelopers.com/videos/632-crypto-secure-data-management-with-in-database-blockchain) - [Thinking Differently - How to Make Money from Cyber Attacks & Cheats](https://www.wearedevelopers.com/videos/745-thinking-differently-how-to-make-money-from-cyber-attacks-cheats) - [Security Pitfalls for Software Engineers](https://www.wearedevelopers.com/videos/726-security-pitfalls-for-software-engineers) - [What makes Cybersecurity different for critical infrastructure?](https://www.wearedevelopers.com/videos/571-what-makes-cybersecurity-different-for-critical-infrastructure) - [Cyber Security: Small, and Large!](https://www.wearedevelopers.com/videos/259-cyber-security-small-and-large) ## Related Articles - [Understanding and Mitigating Common Web Vulnerabilities](https://www.wearedevelopers.com/magazine/565-understanding-and-mitigating-common-web-vulnerabilities) - [What Are The Top Skills Required For Azure Developers?](https://www.wearedevelopers.com/magazine/77-what-are-the-top-skills-required-for-azure-developers) - [Events like RSAC Get You CISOs. Developers Decide What Actually Gets Deployed.](https://www.wearedevelopers.com/magazine/693-events-like-rsac-get-you-cisos-developers-decide-what-actually-gets-deployed) - [Walking Into The Era of Supply Chain Risks](https://www.wearedevelopers.com/magazine/106-walking-into-the-era-of-supply-chain-risks) - [Dev Digest 134 - Where pixels sing?](https://www.wearedevelopers.com/magazine/477-dev-digest-134-where-pixels-sing) - [The 12 Best Jobs for Software Engineers](https://www.wearedevelopers.com/magazine/401-the-12-best-jobs-for-software-engineers)