Senior Security Architect

As a Senior Security Architect, you will collaborate with infrastructure engineers, cloud architects, software developers, security operations teams, and business stakeholders to develop secure technology solutions that align with business objectives and regulatory requirements. You will play a key role in defining security standards, assessing technology risks, and driving security-by-design principles across the organization., * Design and maintain enterprise security architecture frameworks that align with business objectives and industry best practices.

• Develop secure architecture standards for cloud, network, infrastructure, applications, and data platforms.
• Lead security reviews for new technology initiatives, ensuring security-by-design principles are incorporated throughout project lifecycles.
• Collaborate with engineering, infrastructure, DevOps, and application development teams to implement secure technical solutions.
• Conduct security risk assessments, threat modeling, and architecture reviews for enterprise systems.
• Design and implement identity and access management (IAM), privileged access management (PAM), and zero trust security strategies.
• Define security controls for Microsoft Azure, Amazon Web Services (AWS), Google Cloud Platform (GCP), and hybrid cloud environments.
• Develop security policies, technical standards, and architectural documentation that support regulatory compliance.
• Evaluate emerging cybersecurity technologies and recommend solutions that improve organizational security posture.
• Support incident response, vulnerability management, and security remediation activities by providing architectural guidance.
• Collaborate with internal auditors and compliance teams to ensure adherence to ISO 27001, Cyber Essentials Plus, GDPR, NIST, and other relevant standards.
• Provide technical leadership and mentoring to cybersecurity engineers, analysts, and infrastructure teams.
• Present security architecture recommendations, technical roadmaps, and risk assessments to senior leadership and business stakeholders.
• Drive continuous improvement initiatives that strengthen enterprise resilience against evolving cyber threats.

The successful candidate will possess deep expertise in cybersecurity architecture, cloud security, identity and access management, and risk management while demonstrating excellent leadership, communication, and strategic planning skills., * Bachelor's degree in Cybersecurity, Computer Science, Information Technology, Software Engineering, or a related discipline, or equivalent professional experience.

• Significant experience in cybersecurity architecture, enterprise security engineering, or information security leadership.
• Strong expertise in cloud security across Microsoft Azure, Amazon Web Services (AWS), and Google Cloud Platform (GCP).
• Deep understanding of Zero Trust Architecture, Identity and Access Management (IAM), Multi-Factor Authentication (MFA), Single Sign-On (SSO), and Privileged Access Management (PAM).
• Experience designing secure enterprise networks, firewalls, VPNs, web application firewalls, endpoint security, and network segmentation.
• Strong knowledge of security frameworks including ISO 27001, NIST Cybersecurity Framework, CIS Controls, GDPR, Cyber Essentials Plus, and PCI DSS.
• Experience with security technologies such as Microsoft Defender, Microsoft Sentinel, CrowdStrike, Splunk, Palo Alto Networks, Cisco Secure, Fortinet, or similar enterprise platforms.
• Familiarity with Infrastructure as Code (Terraform, CloudFormation, Bicep), DevSecOps practices, and CI/CD security integration.
• Strong understanding of vulnerability management, penetration testing, threat intelligence, and security monitoring.
• Excellent analytical, communication, stakeholder management, leadership, and problem-solving skills.
• Professional certifications such as CISSP, CCSP, SABSA, TOGAF, Microsoft Certified: Cybersecurity Architect Expert, AWS Certified Security - Specialty, or equivalent are highly desirable.
• Experience supporting enterprise digital transformation and cloud migration projects from a security perspective.
• Ability to influence technical strategy and communicate complex security concepts to both technical and non-technical stakeholders.
• Eligibility to work in the United Kingdom.