Security Architect

Security Architect
Permanent
Location: Home / Andover (Hybrid – onsite 2 days a week)
Salary: £100,000 - £110,000 (+ benefits)

We are looking to recruit an SC Cleared Security Architect for a leading technology consultancy who deliver complex, business-critical solutions into secure UK Government and Defence environments.

They are looking for an experienced Security Architect to support major programmes of work, providing security architecture assurance, risk oversight and secure design guidance across complex systems and capabilities.

This is a senior, client-facing role suited to someone who can operate confidently across architecture, cyber security, assurance and delivery teams. You will review solution designs, identify security risks, recommend proportionate controls and produce high-quality architecture artefacts for senior technical and non-technical stakeholders.

The role would suit a Security Architect with strong UK Defence experience, ideally gained across Army, MOD or similarly secure government programmes.

Key responsibilities

• Lead security architecture reviews across complex Defence or Central Government systems and programmes.
• Identify risks, control gaps and design changes required to achieve the required security posture.
• Produce and maintain security architecture artefacts, including HLDs, LLDs, data flows, security principles, patterns and architecture building blocks.
• Ensure security is embedded across solution design, integration, deployment and operational readiness.
• Support cyber assurance activity across design, build, deploy and run phases.
• Work closely with enterprise architects, solution architects, delivery teams, security stakeholders and customer representatives.
• Translate complex security risks and design issues into clear options, recommendations and decision papers.
• Support alignment to relevant Defence, Government and industry security standards.
• Contribute to technical management plans, covering areas such as configuration standards, patching, cryptography, IAM and assurance checkpoints.
• Provide confident stakeholder engagement across mixed technical, operational and senior leadership audiences.

Essential experience

• Active SC clearance.
• Strong UK Defence, MOD or secure Central Government experience.
• Proven background as a Security Architect, Enterprise Security Architect, Cyber Security Architect or Security Consultant.
• Experience providing security architecture assurance across complex systems or major programmes.
• Ability to produce clear architecture documentation and security artefacts.
• Strong understanding of secure design principles, risk management, threat modelling and security controls.
• Knowledge of UK Government / Defence security standards, guidance and assurance processes.
• Experience working with senior stakeholders across security, architecture, engineering and delivery.
• Strong communication skills, with the ability to explain security risk clearly to technical and non-technical audiences.

Desirable experience

• Army programme experience or strong MOD stakeholder exposure.
• Experience with Sparx Enterprise Architect, ArchiMate, NAFv4 or similar modelling approaches.
• Knowledge of Joint Service Publications, NCSC guidance, ISO27001, NIST, CIS or related security frameworks.
• Experience across IAM, PKI, secure integration, cloud security, data flows and security architecture patterns.
• Experience reviewing HLDs, LLDs, current-state and future-state designs.
• CISSP, CISM, ISO27001 Lead Auditor, Microsoft Cybersecurity Architect, AWS Security or similar certifications.