Cyber Security Architect

Our client, a global technology services provider, is looking for an experienced Technical Security Architect to support a Joint Design Team security lead. You'll provide technical security advice and guidance to the Joint Design Team and relevant third parties on a critical Defence programme.

This is a senior role for a cyber security professional who designs and implements security architectures based on Zero Trust ("never trust, always verify"). You'll protect enterprise systems, applications, data and cloud environments through:

• strong identity and access controls
• least-privilege access
• continuous authentication
• micro-segmentation
• robust monitoring

You'll work closely with business, security, infrastructure and compliance teams to develop security roadmaps, assess risk, integrate modern security technologies and ensure alignment with frameworks such as NIST SP 800-207.

Key Responsibilities

• Architect solutions and technically lead their implementation, including on-prem secure cloud and Zero Trust architecture, in line with customer security policies and standards
• Work closely with the customer's architecture team to develop solutions
• Assess security risks by identifying vulnerabilities and defining security requirements for known and emerging threats
• Develop, implement and enforce security policy standards to meet customer security and legal requirements
• Support team members on architectural and technical issues, sharing knowledge and experience
• Maintain a working knowledge of the wider security products and services portfolio and recommend best-fit solutions to the customer
• Continually build knowledge of the security aspects of common product sets and technologies
• Use consultancy skills and a proactive approach to build strong, trusted customer relationships
• Mentor and guide team members to grow skills and capability

What You'll Bring

• Experience in cyber security, security architecture or related disciplines, including delivery within Defence or highly regulated environments
• Proven experience designing and implementing Zero Trust Architectures aligned to NIST SP 800-207
• Strong knowledge of IAM, network security, endpoint security, cloud security and security monitoring
• Experience integrating security architectures into wider enterprise, cloud and infrastructure architectures
• Ability to capture business and security requirements and translate them into practical architectural solutions
• Working knowledge of SABSA and TOGAF
• Strong understanding of threat modelling, risk assessment and secure-by-design principles
• Experience applying standards and regulatory requirements, including NIST, ISO 27001, JSP 440, the HMG Security Policy Framework and other Defence and industry standards
• Ability to work across multi-vendor security ecosystems, selecting and integrating the right technologies
• Excellent communication, consultancy and stakeholder management skills, with the ability to influence security strategy and transformation

Security Requirements

Due to the nature of the work, candidates must have the right to work in the UK. They must also be eligible to meet UK Government and contractual personnel security requirements, including residency requirements. Nationality requirements may also apply.