> Markdown version of [/jobs/ext/3665471-application-security-architect](https://www.wearedevelopers.com/jobs/ext/3665471-application-security-architect). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md).

---

# Application Security Architect

- **Company:** Entrust
- **Location:** UK
- **Experience:** Experienced
- **Salary:** £143,635.0 - £210,664.0
- **Contract:** Permanent contract
- **Skills:** Application Programming Interfaces (APIs), Artificial Intelligence, Amazon Web Services, Microsoft Antivirus, Application Firewall, Microsoft Azure, Software as a Service, Cloud Computing, Cloud Computing Security, Cloud Engineering, Cyber Security, Information Systems, System Configuration, Continuous Delivery, Continuous Integration, Information Leak Prevention, Data Security, Software Design Patterns, Data Flow Control, Identity and Access Management, Information Security Management, Information Systems Security Architecture Professional, Key Management, Network Security, Network Segmentation, Cloud Services, Zero Trust Network Access, Security Information and Event Management, Software Engineering, Data Streaming, Systems Integration, Software Vulnerability Management, Policy as Code, Data Logging, Software Security, Firewalls (Computer Science), National Institute of Standards and Technology Cybersecurity Framework, Microsoft Fabric, Kubernetes, Infrastructure Automation Frameworks, Information Technology, Microsoft Sentinel, Devsecops, Security Orchestration, Automation & Response
- **Published:** October 10, 2026
- **Apply:** https://www.totaljobs.com/job/application-security-architect/entrust-job108124145

## About the Role

* Bachelor's degree in cybersecurity, computer science, information systems, engineering, or a related field, or equivalent relevant experience.
 * Typically five or more years of relevant experience across information security, infrastructure, cloud, networking, software engineering, or technology risk, including at least two years contributing to security design, engineering, or architecture work.
 * Working knowledge of security architecture principles, common threats and vulnerabilities, risk assessment, and compensating controls.
 * Experience with at least two relevant domains, such as cloud security, identity and access management, network security, application security, security monitoring, endpoint security, data protection, or vulnerability management.
 * Experience reviewing technical designs and converting requirements and risks into practical security controls.
 * Familiarity with public cloud and software-as-a-service security concepts, shared-responsibility models, and modern identity-centered security.
 * Ability to create clear architecture diagrams, requirements, decision records, standards, and implementation guidance.
 * Ability to communicate effectively with engineers, architects, service owners, risk and compliance partners, and business stakeholders.
 * Ability to work across multiple teams, manage assigned architecture engagements, and follow work through implementation and validation.
 * Work authorization and travel requirements will be defined for the hiring location and business need., * Hands-on experience with Microsoft Azure, Amazon Web Services, Microsoft Sentinel, Microsoft Defender, Microsoft Purview, or comparable security platforms.
 * Experience with Zero Trust, cloud-native application protection, data loss prevention, cloud access security brokers, security information and event management, endpoint detection and response, web application firewalls, network segmentation, or privileged access.
 * Experience with threat modeling, application programming interface security, containers, Kubernetes, DevSecOps, infrastructure as code, or policy as code.
 * Exposure to artificial intelligence security, agent security, model and prompt risk, machine identities, or governance controls for enterprise artificial intelligence.
 * Knowledge of recognized frameworks and standards such as the National Institute of Standards and Technology Cybersecurity Framework, NIST Zero Trust Architecture, International Organization for Standardization 27001, Payment Card Industry Data Security Standard, Federal Risk and Authorization Management Program, or Cloud Security Alliance guidance.
 * Experience in a global enterprise, regulated environment, software-as-a-service provider, managed service, or high-availability environment.
 * Industry certification such as Certified Information Systems Security Professional, Certified Cloud Security Professional, Azure Security Engineer Associate, AWS Certified Security - Specialty, or a comparable credential.
 * Experience evaluating security products, conducting proofs of concept, or validating controls with implementation and test evidence.

## Description

The Information Security Architect designs and reviews security architectures that support Entrust's enterprise and customer-facing services. The architect translates business, technical, regulatory, and threat requirements into clear security requirements, logical designs, standards, and implementation guidance. The role works under the direction of senior architects and the Director, contributes to technology evaluations and risk decisions, and remains engaged through implementation and validation. Primary coverage includes:

 * Enterprise artificial intelligence and agent security, including data protection, identity, prompt-injection resistance, logging, monitoring, and containment
 * Cloud, software-as-a-service, and hybrid security architecture
 * Identity and access management, privileged access, machine identities, and Zero Trust design
 * Network security, segmentation, firewalls, web application firewalls, secure access, and cloud-delivered controls
 * Security monitoring and telemetry architecture and related integrations
 * Cloud-native application protection, secure access, vulnerability management, endpoint security, and security posture management
 * Security automation, orchestration, infrastructure as code, policy as code, and repeatable control deployment
 * Resilience, recovery, cryptography, secrets management, and key management

This role works closely with Information Technology, Information Security, product and application teams, and service owners. The architect must be able to collaborate across disciplines, document decisions clearly, and follow designs through implementation. Practical experience configuring, integrating, testing, or operating security controls is important, but the role is not expected to be the senior subject-matter expert for every technology in scope.

Responsibilities:

Overall Security Architecture

 * Learn and apply Entrust security principles, reference architectures, standards, and approved design patterns.
 * Develop security requirements and logical designs for new and changed services across cloud, on-premises, software-as-a-service, and hybrid environments.
 * Assess trust boundaries, data flows, identities, threats, failure modes, and regulatory obligations that materially affect a design.
 * Apply Zero Trust, least privilege, defense in depth, secure-by-design, and privacy-by-design principles.
 * Partner with enterprise, cloud, network, application, identity, data, and security specialists to produce implementable designs.
 * Identify control gaps, document material risk and assumptions, recommend proportionate mitigations, and escalate residual risk for decision when needed.
 * Contribute to security standards, patterns, and reusable guidance based on lessons from architecture engagements.

Detailed Security Design

 * Translate approved requirements into logical and physical security designs, control configurations, and implementation guidance.
 * Design or integrate controls for identity, network, endpoint, cloud, application, data protection, security monitoring, and resilience.
 * Define required security telemetry, logging, alerting, retention, and operational ownership so implemented controls can be monitored and supported.
 * Support threat modeling and technical risk assessments for applications, infrastructure, cloud services, artificial intelligence solutions, and third-party platforms.
 * Evaluate security capabilities and vendor claims through documented requirements, proofs of concept, testing, and evidence.
 * Promote automation, infrastructure as code, policy as code, and secure continuous integration and continuous delivery practices where they improve consistency and control evidence.
 * Work with implementers to validate that designs are feasible, supportable, resilient, and aligned with recovery requirements.

Design Review

 * Review solution designs, data-flow diagrams, threat models, build documentation, test plans, and implementation changes for security impact.
 * Provide clear findings, required actions, and risk-based recommendations to technical teams and decision-makers.
 * Verify that security requirements and control ownership are reflected in implementation and test evidence.
 * Participate in architecture, design, and change reviews for material technology changes.
 * Support troubleshooting of complex issues that cross security, cloud, network, identity, application, or data domains.
 * Research emerging technologies, attack techniques, and control capabilities, including artificial intelligence and agentic systems, and recommend practical adoption or mitigation actions.