Security Architect

Security Architect

Location: Huntingdon, Cambridgeshire, UK

We are seeking an experienced Cyber Security Architect to be based at our customer site in Huntingdon, Cambridgeshire, with occasional travel to other UK locations. You will work alongside engineering and delivery teams to design, assure, and maintain a strong and resilient cyber security posture across the customer estate.

Responsibilities include ensuring that solution security designs meet all functional and non‑functional security requirements, delivering the required level of assurance to the client. This will be achieved through the application of Secure by Design (SbD) principles, aligned to HMG standards and frameworks such as NIST CSF and RMF. You will take ownership of design feasibility, support secure delivery, and lead service acceptance reviews and approvals, ensuring all security artefacts meet the required standard.

• Apply defence‑in‑depth, multi‑layered approach to security architecture design.
• Apply proportionate preventative and detective controls to reduce risk to an acceptable level.
• Understand systems engineering lifecycle controls, including requirements and configuration management.
• Familiarity with delivery methodologies such as waterfall, incremental, SAFe Agile, and Dev Ops.
• Provide security review and assurance of High Level Design and Low Level Design artefacts as part of engineering lifecycle governance.
• Perform design trade‑offs in collaboration with architects and engineers to deliver integrated solutions.
• Understand service operations and security operational management planning.
• Support delivery activities within secure or sensitive environments.
• Familiar with Defence Digital environments and MOD‑aligned programmes.

• Strong understanding of Confidentiality, Integrity and Availability (CIA) with practical experience applying these principles.
• Define derived security requirements and maintain traceability across system designs.
• Deliver security assurance for secure and sensitive systems aligned to SbD principles.
• Produce and review security documentation such as SyOPs, RMADs, Security Management Plans, and DART submissions.
• Working knowledge of SIEM technologies, firewalls, mail gateways, load balancers, and endpoint protection solutions.
• Understanding of authentication and authorisation mechanisms such as SAML, LDAP, and PKI.
• Professional certifications such as CISM or CISSP desirable; experience with SABSA or similar frameworks valuable.

• Excellent verbal and written communication skills, with ability to work effectively within multidisciplinary teams.
• Strong organisational skills, able to prioritise and manage own workload to meet delivery timelines.
• Capability to develop and communicate a clear security vision supporting system requirements and overall solution outcomes.
• Communicate complex technical concepts clearly across a wide range of stakeholders.
• Good commercial awareness supporting delivery within programme constraints.
• Experience of line management, supporting development of team members.

You must hold, or be eligible to obtain, Developed Vetting (DV) clearance at STRAP level.

£61,500.00 – £78,800.00

All qualified applicants will receive consideration for employment without regard to sex, race, ethnicity, age, national origin, citizenship, religion, physical or mental disability, medical condition, genetic information, pregnancy, family structure, marital status, ancestry, domestic partner status, sexual orientation, gender identity or expression, veteran or military status, or any other basis prohibited by law. Leidos will also consider for employment qualified applicants with criminal histories consistent with relevant laws.