Solution Architects - Cyber Security

You will experience in 1 of the following 3 and experience working as Solution Architect on large scale programmes within a Cyber Security Portfolio.

1 -Working knowledge of security architecture requirements for solution designs, good security practices related to AWS/Azure PaaS, IaaS, SaaS configuration and an understanding of enterprise scale solutions.

Experience collaborating with the Security Operations Centre (SOC) to optimise security monitoring, response planning and execution.

Experience with assisting the development of a TOM for Vulnerability Management.

Understanding of vulnerability management and threat landscape detection and remediation

Understanding of Network Security risks and solutions

Essential Technical Skills & Qualifications

Experience of the M365 security stack: Endpoint, Defender, DLP, Device Management, Azure Sentinel

Cloud Security (Tenable, MDR solutions, Remote Access, Network security)

Working knowledge of Cyber Essentials, UK DPA/GDPR

Knowledge of one or more cybersecurity controls standards and frameworks (CIS, NIST, etc)

Knowledge of Claroty and SIEM

2 - Experience with Cyber Security tools such as Tenable (or Qualys/Rapid7), Claroty (or Nozomi/Dragos), ServiceNow, and SIEM platforms (eg Splunk, Microsoft Sentinel).

Working knowledge of CMDB and asset discovery data models, and API-based integration patterns between security and ITSM tooling.

Working knowledge of network segmentation, secure remote access and secure-domain migration patterns for OT environments.

Working knowledge of NCSC Cyber Assessment Framework (CAF), CIS Controls and regulatory requirements (eg NIS Regulations, DWI).

Knowledge of one or more cybersecurity controls standards and frameworks (CIS, NIST, IEC 62443, MITRE ATT&CK).

Excellent written and verbal communication, with the ability to simplify complex designs for decision-makers.

3 - Experience with Cyber Security tools such as Cisco ISE, Aruba ClearPass, Forescout or FortiNAC (NAC); Tenable, Qualys, or Armis (discovery); Fortinet, Checkpoint, or Palo Alto (VPN and Firewalling); and SIEM/log management platforms (eg Splunk, Microsoft Sentinel).

Adept with Fortinet and Checkpoint Firewall configuration and ability to review network and segmentation designs.

Working knowledge of RADIUS/TACACS+, 802.1X, and PKI/certificate-based authentication.

Working knowledge of Cyber Essentials, UK DPA/GDPR, and log retention/data protection compliance requirements.

Knowledge of one or more cybersecurity controls standards and frameworks (CIS, NIST, MITRE ATT&CK).

Desirable Experience

Experience assessing or deploying network access and segmentation controls in OT/ICS or IoT-heavy environments.

Experience integrating VPN, NAC, and discovery solutions with MDM/UEM platforms (eg Microsoft Endpoint Manager/Intune) for device compliance data.

Experience leading the end-to-end technical delivery of a Cyber Security Programme.