Security Architect

Salary: £70,000 - £90,000 (Depending on location, expereince and interview performance)

My client is a leading digital transformation consultancy, trusted by some of the most significant public and private sector organisations across the UK and beyond. They build platforms and services that genuinely matter, and security sits at the heart of everything they do.

This is an opportunity to join as a Security Architect at consultant level, working embedded within agile delivery teams to shape how security is designed, applied and evolved across complex, cloud-based programmes. You will not be a gatekeeper at the end of a project. You will be in the room from the start, helping teams build things the right way.

The work is varied, the problems are real, and you will be surrounded by talented people who take their craft seriously.

As a Security Architect, you will be responsible for the secure design and delivery of cloud services and solutions, working across the full software development lifecycle. Day to day, you will be:

• Designing and applying robust security practices across platforms and services built for high-profile customers
• Identifying security issues in existing system designs and recommending practical mitigations that balance cost, risk and usability
• Partnering with agile delivery teams to embed security thinking throughout the development journey
  
  Advising technical and non-technical audiences, from development teams through to senior stakeholders
• Managing, mentoring and coaching a small number of engineers and architects, supporting their performance and career development
• Staying current with emerging technologies, threats and approaches

• Demonstrable experience in the secure design and delivery of cloud services and solutions
• A track record of identifying security vulnerabilities in existing designs and recommending sensible, proportionate mitigations
• Strong knowledge of security standards and regulations including NCSC, ISO, SOC, NIST, PCI and GDPR
• Deep architectural expertise in one or more of the following specialisms: AI/ML Security, Cloud Security, M365 Security, or Dev Sec Ops  Security Architecture
• Experience in application architecture, software development or infrastructure architecture
• Solid understanding of network security (OSI, TCP/IP), web application security (OWASP) and cryptographic controls (PKI, TLS)
• Experience with Continuous Security, CI/CD techniques and security tooling
• Confidence communicating complex security topics to audiences of all technical levels
• A genuine passion for developing people and a track record of mentoring and coaching
• Experience with identity management, authentication and authorisation products and patterns
• Sector experience across Public, Commercial, Defence or Healthcare environments
• End-to-end security involvement spanning governance, risk and compliance, operational security, supply chain security and secure user management
• Penetration testing qualifications (OSCP, CREST, TIGER or equivalent)
• Experience leading security engineering teams

This is a consultancy where security professionals are given genuine responsibility, varied exposure and real investment in their development. You will work on programmes that matter, with colleagues who will challenge and support you in equal measure.