Security & Infrastructure Architect

You must have valid SC Clearance to be considered for this contract role.

Lithium3 have a central government client based in Nottingham and we are looking for an experienced Security & Infrastructure Architect to provide technical leadership across cloud infrastructure, network security, identity and access management, data platforms and secure AI connectivity.

Please note that this a hybrid role and you must be in the office once a fortnight.

£675 per day and Inside IR35.

The role will focus on defining and implementing appropriate security controls across Azure ensuring that infrastructure and data platforms are securely designed, configured and operated.

The successful contractor will have strong technical understanding of Azure infrastructure and security, with the ability to work across infrastructure, data, AI and security teams to identify risks, define controls and support remediation.

• Define identity, network and infrastructure security controls across cloud and data platforms.
• Embed security principles including least privilege, hardening, encryption and security monitoring.
• Assess infrastructure and platform risks, coordinate remediation activities and support security assurance.
• Provide security guidance across Azure and Databricks environments.
• Work with technical and data teams to ensure secure architecture and connectivity.
• Review infrastructure and deployment approaches to ensure security requirements are incorporated from the outset.
• Support requirements elicitation, process/integration mapping and requirements traceability where required.

• Strong understanding of Azure virtual networks, subnets, routing, peering and connectivity to existing systems.
• Experience with network security groups and Azure network security controls.

• Understanding of virtual networks, private endpoints, DNS and firewall rules.
• Experience designing and reviewing secure connectivity between cloud services and existing infrastructure.

• Strong understanding of Microsoft Entra .
• Experience with identity integration, role-based access control, managed identities and service principals.
• Knowledge of least-privilege access models.

• Understanding of secure Databricks workspace access and networking requirements.
• Experience with both classic and serverless compute security considerations.
• Knowledge of Unity Catalog, permissions and secure storage access.

• Experience reviewing Infrastructure-as-Code security controls.
• Knowledge of Azure Policy and secure deployment pipelines.
• Ability to identify configuration drift and help prevent insecure infrastructure changes.

• Understanding of identity-based authentication and certificate management.
• Experience with credential and certificate renewal processes.
• Knowledge of encryption requirements across infrastructure and data platforms.

• Understanding of securing access to model endpoints and controlling outbound connections.
• Awareness of where prompts, responses and retrieved data are processed and logged.
• Ability to work with AI and data governance teams to establish appropriate security controls.

By applying for this Contract your details will be submitted to Lithium
3.

Candidate Privacy Information Statement on our website explains how we will use your information.

Azure | Microsoft Entra  | Azure Networking | NSGs | Private Endpoints | DNS | Firewalls | IAM | RBAC | Managed Identities | Service Principals | Databricks | Unity Catalog | Infrastructure-as-Code | Azure Policy | CI/CD | Encryption | Certificates | Security Monitoring | LLM/AI Security | Cloud Security