Technical Security Architect - On-Site Hampshire

• Design security architectures based on Zero Trust principles to protect enterprise systems, applications, data, and cloud environments.
• Architect solutions and technically lead their implementation, ensuring compliance with customer security policies and standards, including for on-premises secure cloud and Zero Trust architecture.
• Work with the customers architecture team to develop solutions.
• Assess security risks, identify vulnerabilities, and define security requirements to address current and future threats.
• Develop, implement, and enforce security policy standards to support compliance with customer security and legal requirements.
• Advise and support team members on architectural and technical issues, sharing technical knowledge and experience.
• Build and maintain knowledge of our security products and services portfolio, promote it to the customer, and encourage best-fit solutions.
• Continually review and enhance knowledge of the security aspects of common product sets and technologies.
• Apply a proactive consultancy approach to build and maintain customer trust.
• Mentor and guide team members to help develop their skills and capabilities.
• Work with business, security, infrastructure, and compliance teams to develop security roadmaps, assess risks, integrate security technologies, and align solutions with relevant frameworks.

Technologies:

• AWS
• Architect
• Azure
• Cloud
• IAM
• Support
• JSP
• Network
• Security
• TOGAF

• At least 5 years of experience in cybersecurity, security architecture, or related disciplines, including delivering security solutions in Defence or highly regulated environments.
• Proven experience designing and implementing Zero Trust architectures aligned with NIST SP 800-207 principles.
• Strong knowledge of identity and access management (IAM), network security, endpoint security, cloud security, and security monitoring.
• Experience developing and integrating security architectures within enterprise, cloud, and infrastructure architectures.
• Ability to engage stakeholders, capture business and security requirements, and translate them into practical architectural solutions.
• Working knowledge of architectural frameworks such as SABSA and TOGAF.
• Strong understanding of threat modelling, risk assessment, and secure-by-design principles, and how to apply them to architectural decisions.
• Experience interpreting and applying security standards, frameworks, and regulatory requirements, including NIST, ISO 27001, JSP 440, the HMG Security Policy Framework, and relevant Defence and industry standards.
• Ability to work across multi-vendor security ecosystems and select and integrate technologies to meet business and security objectives.
• Excellent communication, consultancy, stakeholder management, and leadership skills, including the ability to influence security strategy and transformation initiatives.
• A BSc and/or MSc in Cyber Security, Computer Science, Information Technology, Information Security, or a related subject, or relevant industry experience.
• Relevant qualifications and certifications may include CompTIA Security CASP (or SecurityX), Associate membership grade with CIISEC, ICS2 Certified Cloud Security Professional (CCSP), Certified Information Systems Security Professional (CISSP), Information Systems Security Architecture Professional (ISSAP), CESG Certified Cyber Professional (CCP) in Security Architecture or Risk Management, cloud security qualifications such as Microsoft Azure, AWS, or Google, and CISM, CISA, or equivalent professional certification. An advanced degree in a relevant field is a plus.
• Must meet applicable UK Government and contractual personnel security requirements, including residency requirements, and have the right to work in the United Kingdom. Some roles may have nationality requirements to meet security obligations.
• Must meet the roles security clearance requirement and be able to work on-site in the roles location.