Security Architect

Join to apply for the Security Architect role at i-confidential

5 days ago Be among the first 25 applicants

Join to apply for the Security Architect role at i-confidential

Direct message the job poster from i-confidential

We are currently looking for a Security Architect/Design Engineer with specific experience in Network & Infrastructure Design. This is to join an existing team with one of our financial services clients.

Applicants will need to attend a client office 3 days per week; location can be a choice of Edinburgh/Sheffield/Birmingham/Manchester.

The role will involve managing end-to-end solution design and delivering design documents in line with functional and non-functional business requirements, strategies, principles, standards, and patterns. Alongside the creation of high-level designs, you will be required to publish new architecture patterns, key decisions, design deviations, and technical risks and issues where appropriate.

Support and maintain the in-house developed web application with an Azure hosted Data Lake backend, used for firewall rule recertification for CheckPoint, Illumio and Fortinet. The role involves architecting new features to incorporate new requirements to support WAF, Network Segmentation and Proxy capabilities. Additionally, assisting with re-platforming the service to a new infrastructure.

• Network Security Controls:
  Firewalls, WAF, software‑defined network segmentation, IDS/IPS, Proxies and NAC.
• Segmentation and Micro‑Segmentation:
  Dividing the network into smaller, isolated segments to limit attack surfaces and ensuring ongoing connectivity across zones.
• Secure Protocols:
  Implementing secure communication protocols like TLS/SSL, IPsec, and SSH.
• Network Traffic Analysis:
  Interpretation & monitoring and analysing network traffic to detect and respond to anomalies.
• Network Security Policies:
  Definition and enforcement of policies for secure network operations and access.
• Secure Baselining:
  Enforcement secure configurations for systems and applications. Redundancy and High Availability:
  Designing systems to maintain operations and availability during failures.
• Disaster Recovery Planning:
  Creating and testing plans for recovering from major incidents or disasters.

Broad background across information technology with the ability to communicate clearly with non‑security technical SMEs at a comfortable level

Experience and understanding of both the roles and interlock between enterprise & solution architecture

Experience in both operational and transformation cybersecurity roles or a clear working understanding of both perspectives

Experience working in large‑scale IT transformation programmes

Ability to manage separation of control from technical design authority responsibilities – represent Cyber Services at technical and security design authorities to ensure that solutions are secure.

Experience ensuring compliance with security controls to identify control gaps, develop remediation plans and determine residual risk across both local and national programmes.

• Working experience with CheckPoint, Illumio, and/or Fortinet or similar related firewall technology.
• Bizz Design, Archi, or generic UML visualisation experience for high‑level designs.
• High proficiency and expertise in Jira for project & tasks management.
• Working proficiency in Confluence for documentation
• Provide assurance, support and oversight of solutions designs and support the engineering teams in delivering and executing strategic technology deployments.
• Ensure solution designs align to published reference architecture.
• Provide technical expertise & consultation to transformative programmes of work within their security domain.
• Influence HSBC’s business and technology executives to help them align their initiatives with standardised offerings whilst also engaging with them to understand their business requirements, threats and risks.
• Clear understanding of both the motivations of the business and technical security.

• Willingness and ability to present reference architecture to design authorities and articulate deep technical concepts to a broad range of stakeholders in both large forums and…