Cybersecurity Architect & Engineering Lead

DXC Technology is seeking a Lead Cybersecurity Architect & Engineering Lead to own the integrated cybersecurity architecture for a major greenfield enterprise transformation programme.

Working under the programme Design Authority, you will lead security design across segregated, air-gapped and cross-domain environments. You will coordinate specialist engineering teams across identity, cryptography, security operations, endpoint, data, application and OT/IoT security, ensuring a coherent architecture from design through implementation, testing and operational transition.

The role combines architecture ownership, technical direction and engineering governance, supported by domain specialists, OEM architects and delivery partners.

• Develop and maintain the integrated Cybersecurity High-Level Design (HLD).
• Lead and govern capability-specific Low-Level Designs (LLDs) produced by engineers, OEMs and domain specialists.
• Define security principles, standards, architecture patterns and secure-by-design requirements.
• Design security controls for segregated, air-gapped and cross-domain environments.
• Maintain traceability between requirements, designs, implementation decisions and the Bill of Quantities (BoQ).
• Lead architecture reviews and support Design Authority approvals.
• Align designs with applicable security, privacy and regulatory requirements.

• Lead architecture across IAM, PAM, PKI, cryptography, security operations, endpoint protection, data protection and application security.
• Define the monitoring, detection, response and automation architecture across SIEM, SOAR, SOC and related capabilities.
• Govern specialist development of detection content, response playbooks and security integrations.
• Define secure integration requirements across applications, infrastructure and cybersecurity platforms.
• Coordinate with network, infrastructure, applications, smart-campus and service-management work streams.
• Integrate OT/IoT security, resilience and cyber recovery requirements into the overall design.
• Provide technical direction to multidisciplinary cybersecurity engineers and domain specialists.
• Review detailed designs, configurations and implementation approaches against the approved architecture.
• Coordinate OEM and vendor inputs and resolve cross-platform technical issues.
• Challenge design proposals constructively and manage technical decisions, risks and dependencies.
• Validate platform sizing, licensing, support requirements and BoQ quantities.
• Identify opportunities to optimise solutions while maintaining security and operational requirements.

• Define cybersecurity testing, acceptance criteria and assurance requirements.
• Coordinate validation activities across engineering, application and OEM teams.
• Review material security findings, design deviations and remediation proposals.
• Support go-live readiness, operational handover and transition to support teams.
• Provide security recommendations for interim and transitional application environments.
• Communicate progress, risks, dependencies and required decisions to programme stakeholders.

• Bachelor’s degree in Cybersecurity, Information Security, Computer Science, Engineering or a related discipline, or equivalent professional experience.
• At least 12 years of relevant cybersecurity experience
  .
• At least 5 years leading security architecture or engineering activities for complex enterprise, government, defence or critical-infrastructure programmes.
• Demonstrated experience coordinating multidisciplinary cybersecurity teams, OEMs and vendors.
• Strong experience producing HLDs and governing detailed security designs.
• Experience architecting segregated, air-gapped or cross-domain environments.
• Experience with cybersecurity solution sizing, licensing and BoQ development.
• Strong technical writing, stakeholder management, analytical and problem-solving skills.
• Fluent written and spoken English.

Strong architecture experience across several of the following domains:

• Identity & Access: Identity governance, SSO, MFA, PAM and secrets management.
• Cryptography: PKI, HSM, certificate lifecycle, encryption and key management.
• Security Operations: SIEM, SOAR, SOC, NDR, UEBA and threat intelligence.
• Endpoint & Workload Security: EDR/XDR and endpoint or workload protection.
• Data…