Security Architect

Job Description

As a Security Architect, you’ll partner with government, financial services, and private sector clients to design security solutions that address their most complex digital risks. You’ll translate threat landscapes, compliance obligations, and business constraints into practical security architectures, working across the full engagement lifecycle, from threat modelling and security options analysis to facilitating design sessions with delivery teams and presenting recommendations to architecture review boards and senior stakeholders.

Whether that’s defining a zero‑trust approach for a government department, designing security controls for a bank’s cloud migration, or guiding development teams through secure‑by‑design decisions, you’ll bring both depth and pragmatism. Your background in cloud security, application security, and public sector compliance means clients can trust your advice on what works in enterprise environments.

You’ll join our central architecture practice alongside experienced Technology Principals and Solution Architects. Security in delivery teams is often under‑served; your role is to change that, not through gates and sign‑offs, but by embedding security thinking early and keeping it there. That includes guiding and up‑skilling delivery teams on secure‑by‑design practices, helping engineers and product managers build security literacy without slowing down delivery.

Translate threat landscapes, compliance obligations, and business constraints into practical security architectures across the full engagement lifecycle.

Facilitate threat modelling, security options analysis, design sessions, and presentation of recommendations to architecture review boards and senior stakeholders.

Define zero‑trust approaches, design security controls for cloud migration, and guide development teams through secure‑by‑design decisions.

• Designed and validated security architectures for enterprise‑scale programmes across cloud platforms, application security, identity and access management, and system integration.
• Cloud and application security experience securing workloads on AWS and/or Azure, including network segmentation, IAM, encryption, secrets management, and security monitoring. Understanding App Sec practices including secure SDLC, SAST/DAST tooling, API security, and container security in agile delivery contexts.
• Direct experience working with clients and senior stakeholders to assess risk, facilitate threat modelling, and build consensus around security approaches. Ability to communicate clearly with technical teams and non‑technical leadership.

• and public sector compliance: experience working within GDS digital standards, NCSC guidance, and UK government security classifications.
• Financial services security: experience designing controls for regulated financial environments, including FCA/PRA expectations and PCI‑DSS.
• Security frameworks and standards: working knowledge of NIST CSF, ISO 27001, CIS Controls, or SABSA. Holds or is working towards CISSP, CISM, CCSP, or equivalent.
• GenAI security: experience assessing and mitigating risks in AI/ML solution architectures, including data exposure, prompt injection, model supply chain, and output integrity.

• Quarterly performance‑related profit share scheme.
• Strong career progression and mentorship coaching with a quarterly Pathways Career Development programme.
• Flexible / remote working arrangements.
• Financial wellbeing initiatives including pension, private healthcare cover, life assurance, financial advice, and employee discount scheme.
• Employee wellbeing schemes such as gym discounts, bike‑to‑work, fitness classes, mindfulness workshops, employee assistance programme, generous holiday allowance, enhanced maternity/paternity leave, marriage/civil partnership leave, and special leave policies.
• Educational assistance and incentives for certifications from AWS, Microsoft, Oracle, and Red Hat.
• Reward schemes including annual excellence awards and a call‑out platform.
• Environment, social and community first initiatives that enable participation in local fundraising and development opportunities.

Version 1 is an equal opportunities employer. We are committed to building a diverse, inclusive and respectful workplace where everyone feels valued and able to thrive. We welcome applications from people of all backgrounds, identities and lived experiences, and we value the different perspectives people bring. We want every candidate to have a positive and accessible recruitment experience. If you need reasonable adjustments at any stage of the process, please contact us.

We will consider all requests carefully, respectfully and confidentially.