> Markdown version of [/jobs/ext/4000032-senior-security-architect](https://www.wearedevelopers.com/jobs/ext/4000032-senior-security-architect). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md).

---

# Senior Security Architect

- **Company:** Pertemps
- **Location:** Reading, UK
- **Experience:** Expert
- **Salary:** £70,000.0 - £74,000.0
- **Contract:** Permanent contract
- **Skills:** Amazon Web Services, Microsoft Azure, Cloud Computing, Cloud Computing Security, Cyber Security, Identity and Access Management, Security Information and Event Management, National Institute of Standards and Technology Cybersecurity Framework, CIS Benchmarks
- **Published:** October 29, 2026
- **Apply:** https://jobs.thameswater.co.uk/?VacancyId=46225&job_board=Pertemps

## About the Role

* Security Architecture Strategy: Extensive experience operating as a Security Architect within complex enterprise environments, developing security architecture strategies, roadmaps, and target-state architectures aligned with business and technology objectives.

 * Security Architecture Delivery: Proven experience leading security architecture activities across the full solution lifecycle, from concept and design through implementation, transition, and operational service.
 * Security Architecture Governance: Experience providing architecture assurance, design reviews, governance, and constructive challenge through architecture review boards, design authorities, technical reviews, and stage-gate approval processes.
 * Security Risk & Threat Modelling: Demonstrable experience conducting structured threat modelling, security risk assessments, and control assurance activities across complex technology solutions, platforms, and services.
 * Security Domain Expertise: Strong understanding of cybersecurity domains, with demonstrable depth of expertise in at least two areas, such as IAM, PAM, SIEM, SOC, EDR, Cloud Security, or IT Security.
 * Cloud Security Architecture: Experience designing secure solutions across cloud, hybrid, and on-premises environments, with strong knowledge of Microsoft Azure and at least one additional public cloud platform, such as AWS or GCP.
 * Security Frameworks & Standards: Experience applying recognised security frameworks, standards, and methodologies, including ISO 27001/27002, NIST CSF, CIS Controls, CAF, and Secure by Design principles.
 * Stakeholder Engagement: Proven ability to lead security architecture workshops, influence technical and business decisions, and communicate complex security requirements to stakeholders at all levels.
 * Security Architecture Artefacts: Experience developing and maintaining security principles, requirements, guardrails, technical standards, reusable patterns, reference architectures, and architecture documentation.
 * Operational Security Alignment: Experience collaborating with Security Operations, Security Engineering, technology, and delivery teams to ensure architectural decisions translate into effective, maintainable, and resilient operational capabilities.
 * Essential Skills & Qualifications:
 * Technical Security Expertise: Strong knowledge of enterprise, solution, and technical security architecture practices, with the ability to apply secure-by-design principles across complex technology environments.
 * Security Risk Management: Ability to translate business, legal, regulatory, and technical requirements into practical security controls, architectural decisions

## Description

As the Senior Security Architect, you will play a key role within the Information Security and Cyber Security team, helping to develop and maintain Thames Water's security architecture strategy, roadmaps, principles, standards, and reusable security patterns. You will provide security architecture leadership across strategic transformation and innovation programmes, ensuring secure-by-design practices are embedded throughout the technology delivery lifecycle.

Reporting to the Head of Security Architecture, you will work closely with security, technology, operational, and business stakeholders to ensure new and existing technology capabilities are designed and delivered with appropriate, proportionate, and effective security controls. This role requires deep technical expertise, strategic thinking, and the ability to influence architectural decisions, manage security risks, and strengthen cyber resilience across a regulated Critical National Infrastructure environment.

What you'll be doing as the Senior Security Architect

 * Security Architecture Strategy: Support the development and maintenance of Thames Water's security architecture strategy, domain roadmaps, and target-state architectures, ensuring alignment with business objectives, technology strategy, and organisational security priorities.

 * Security Domain Leadership: Act as a recognised subject matter expert across assigned cybersecurity domains, including Identity and Access Management (IAM), Privileged Access Management (PAM), Security Information and Event Management (SIEM), Security Operations Centre (SOC), Endpoint Detection and Response (EDR), Cloud Security, IT Security, and OT Security.
 * Secure Solution Design: Lead security architecture workshops, design reviews, and assurance activities across projects and programmes, ensuring solutions are secure by design and aligned with approved security principles, standards, patterns, and the organisation's risk appetite.
 * Security Architecture Artefacts: Develop, maintain, and govern security architecture principles, requirements, guardrails, technical standards, reusable patterns, reference architectures, and technical guidance to support consistent and repeatable security outcomes.
 * Threat & Risk Assessment: Lead threat modelling, security risk assessments, and architecture risk identification activities, translating business, regulatory, and technical requirements into proportionate security controls and effective mitigation strategies.
 * Security Control Assurance: Provide security architecture oversight throughout the technology delivery lifecycle, including architecture reviews, design authorities, stage-gate assessments, and go-live assurance, ensuring agreed security controls are implemented effectively.
 * Collaboration Across Teams: Work closely with Enterprise Architects, Solution Architects, Security Engineering, Cyber Security Operations, project and programme teams, technology owners, business leaders, and OT stakeholders to embed security into strategic initiatives and operational environments.
 * Security Governance & Compliance: Ensure alignment with recognised security frameworks and standards, including ISO 27001, NIST Cybersecurity Framework, CIS Controls, Cyber Assessment Framework (CAF), and Secure by Design principles, supporting compliance within a regulated Critical National Infrastructure environment.
 * Vendor & Technology Evaluation: Provide security architecture expertise during technology procurement, product selection, and vendor assessments, ensuring proposed solutions meet Thames Water's security architecture requirements and support long-term security objectives.
 * Security Capability Development: Contribute to the development of security capabilities, technology roadmaps, and operational improvements, promoting knowledge sharing, mentoring colleagues, and championing security-by-design principles and continuous improvement across the organisation.