Security Architect

Security Architect

2-3 days Bristol then rest remote
6 months likely extension
£600pd outside IR35
Active DV or SC clearance required

• Develop secure architecture designs for container platforms (e.g., Kubernetes, Open Shift, Docker).
• Architect and strengthen security controls across virtualisation technologies
  , including VMware, Hyper?
  
  V, and cloud-native virtualisation frameworks.
• Produce high-quality HLDs/LLDs
  , security patterns, and architectural governance artefacts.
• Ensure designs align with NCSC guidance
  , industry best practices (e.g., CIS Benchmarks), and organisational policy.

• Conduct security assessments and threat modelling against containerised and virtualised workloads.
• Validate platform configurations against security baselines, compliance frameworks, and risk appetite.
• Provide expert guidance during project delivery to ensure security by design principles are followed.
• Support accreditation activities and ensure all architectural documentation meets government standards.

• Embed security controls within CI/CD pipelines.
• Advise on secure container image lifecycle management (build, scan, deploy, retire).
• Evaluate and implement tools for:
  • Container security scanning (e.g., Trivy, Aqua, Twistlock)
  • Runtime protection and workload isolation
  • Secrets and identity management (Vault, KMS, etc.)
• Define security controls for ingress/egress, service mesh, and inter?container communications.

• Work closely with engineering, infrastructure, and security operations teams.
• Act as SME for containerisation and virtualisation security.
• Communicate complex technical concepts to both technical and non?technical stakeholders.
• Influence and guide senior leadership on architectural decisions and risk.

• Active SC Clearance (minimum).
• Proven track record as a Security Architect in large-scale or secure environments.
• Deep technical knowledge of:
  • Kubernetes
    , Docker, and container orchestration platforms.
  • Virtualisation platforms such as VMware vSphere/ESXi, Hyper?
    
    V, or KVM.
  • Cloud platforms (AWS, Azure, GCP) and container services (AKS/EKS/GKE).
• Strong understanding of:
  • Network and infrastructure security
  • Zero Trust principles
  • Identity and Access Management (IAM)
  • Secrets management
  • Workload isolation and micro?segmentation
• Knowledge of security standards and frameworks:
  • NIST, ISO 27001, CIS Benchmarks
  • NCSC Cloud Security Principles
  • Government Security Classifications Policy

• Experience with Open Shift or enterprise Kubernetes distributions.
• Hands?on security tooling (Falco, Istio, Calico, etc.).
• Experience with SAST/DAST, SBOMs, and software supply chain security.
• Familiarity with automation tooling (Terraform, Ansible, Helm).
• Certifications such as:
  • CCSK / CCSP
  • CISSP
  • CISM
  • Kubernetes Security Specialist (CKS)
  • VMware security-related certifications