> Markdown version of [/jobs/ext/4594905-security-principal-architect](https://www.wearedevelopers.com/jobs/ext/4594905-security-principal-architect). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md).

---

# Security Principal Architect

- **Company:** Intercity Technology Limited
- **Location:** Birmingham, UK
- **Contract:** Permanent contract
- **Skills:** Amazon Web Services, Microsoft Azure, Cyber Security, Software Design Patterns, Identity and Access Management, Information Systems Security Architecture Professional, Network Architecture, Sherwood Applied Business Security Architecture, Software Engineering, Software Vulnerability Management, Google Cloud, Software Security, Togaf, Information Technology, CIS Benchmarks, Devsecops
- **Published:** November 6, 2026
- **Apply:** https://careers.intercity.technology/jobs/8387231-security-principal-architect

## About the Role

We are seeking an experienced security architecture professional to design and lead secure, resilient and scalable technology solutions across the organisation. The successful candidate will define security architecture principles, translate business and technology requirements into robust security controls, and provide expert guidance across cloud, infrastructure, applications, data and identity., * Proven experience in a senior security architecture, cyber security architecture or enterprise security architecture role.

 * Strong knowledge of security architecture frameworks, principles, design patterns and risk management methodologies.
 * Practical experience designing secure cloud solutions across platforms such as Microsoft Azure, Amazon Web Services or Google Cloud Platform.
 * Strong understanding of application security, infrastructure security, network architecture, data protection and identity and access management.
 * Experience with threat modelling methodologies and security frameworks such as SABSA, TOGAF, NIST Cybersecurity Framework, ISO 27001 or CIS Controls.
 * Knowledge of secure software development, DevSecOps, vulnerability management and security testing practices.
 * Experience assessing third-party suppliers, technology products and outsourced services from a security perspective.
 * Ability to balance security requirements with usability, performance, delivery timelines and commercial considerations.
 * Excellent stakeholder management, communication, influencing and technical writing skills.
 * Experience working in complex, regulated or highly available environments., * Relevant degree or equivalent professional experience in cyber security, information security, computer science, technology or a related discipline.
 * Professional certification such as CISSP, CISM, SABSA, CCSP, GIAC, TOGAF or an equivalent security architecture qualification.
 * Experience with security architecture tools, enterprise architecture repositories and risk management platforms.
 * Knowledge of relevant UK and international legislation and regulations, including the UK GDPR, Data Protection Act 2018, NIS Regulations and sector-specific requirements., * Strategic and analytical, with the ability to connect business objectives to technology and security outcomes.
 * Pragmatic and solutions-focused, with a strong commitment to secure-by-design principles.
 * Confident working independently and collaboratively across multidisciplinary teams.
 * Comfortable challenging assumptions and influencing decisions through clear evidence and sound judgement.
 * Committed to continuous learning and maintaining awareness of the evolving cyber security landscape.

## Description

* Define, maintain and communicate enterprise security architecture principles, standards, patterns and reference architectures.
 * Develop secure solution architectures aligned with business objectives, risk appetite, regulatory requirements and industry best practice.
 * Provide security architecture leadership across cloud, on-premises, hybrid infrastructure, applications, networks, data and identity platforms.
 * Assess proposed technologies, designs and third-party services to identify security risks, dependencies and opportunities for improvement.
 * Conduct threat modelling, security risk assessments and design reviews, recommending appropriate mitigating controls.
 * Translate complex security requirements into practical, cost-effective and implementable technical solutions.
 * Collaborate with engineering, infrastructure, product, data, risk, compliance and delivery teams throughout the solution lifecycle.
 * Advise on identity and access management, privileged access, encryption, secrets management, network security, endpoint protection and security monitoring.
 * Support the development and implementation of secure-by-design and DevSecOps practices.
 * Ensure security architecture decisions are documented, governed and traceable through appropriate architecture repositories and design records.
 * Monitor emerging threats, technologies, vulnerabilities and regulatory developments, assessing their potential impact on the organisation.
 * Provide technical leadership during security incidents, investigations and remediation activities where required.
 * Contribute to security strategy, roadmaps, policies, standards and continuous improvement initiatives.
 * Present security risks and recommendations clearly to both technical and non-technical stakeholders, including senior leadership.