Job Description:

I am currently looking for a Security Architect on a 12 month contract in Gloucestershire.

Job Title: Security Architect – Cloud, On-Premise & Secure Systems Architecture
Rate: £90-110 per hour Inside IR35 (dependant on experience)
Contract: 12 mths
Work Pattern: Hybrid
Clearance: Suitable candidates must have active eDV clearance. We will not be able to consider candidates who do not have this level of clearance.

I am looking for an experienced Security Architect to lead the design, assurance and continual improvement of secure technology solutions across cloud, hybrid and on-premise environments. This role will be responsible for embedding security throughout the full technology lifecycle, supporting cloud adoption, cloud systems engineering, digital transformation programmes and enterprise platforms.

Working with architecture, engineering, infrastructure, security and delivery teams, you will provide technical leadership to ensure solutions align with Secure by Design principles, organisational risk appetite, regulatory requirements and industry best practice. Experience with cryptographic services and key management is advantageous but not essential.

• Design and assure secure architectures across cloud, hybrid and on-premise environments.
• Develop security architecture principles, standards, patterns and reference architectures.
• Embed security requirements within platform, infrastructure and application architectures.
• Review solution designs to ensure appropriate security controls are implemented throughout the system lifecycle.
• Support secure cloud adoption, modernisation and digital transformation initiatives.
• Provide expert guidance across infrastructure, applications, networks, platforms and data services.
• Ensure solutions meet requirements for confidentiality, integrity, availability, resilience and recoverability.
• Support the design of complex, distributed and mission-critical systems.

• Conduct security architecture reviews, threat modelling and risk assessments.
• Identify security risks, vulnerabilities and technical debt, recommending appropriate mitigations.
• Support risk-based decision making across programmes and enterprise initiatives.
• Define security requirements, control objectives and acceptance criteria.
• Contribute to security assurance, accreditation and compliance activities.
• Ensure designs align with security policies, standards and regulatory obligations.

• Provide security oversight across public cloud, private cloud and hybrid cloud platforms.
• Assess cloud-native services, Infrastructure as Code (IaC), container platforms and modern application architectures.
• Support secure migration from legacy environments to cloud-hosted solutions.
• Develop security patterns covering identity and access management (IAM), privileged access, network segmentation, platform security, logging, monitoring and resilience.
• Evaluate emerging technologies and provide recommendations for secure adoption.

• Contribute to security architecture strategy, roadmaps and target-state architectures.
• Participate in design authorities, architecture review boards and governance activities.
• Develop reusable security patterns and guidance for engineering teams.
• Lead security reviews relating to major technology change and transformation programmes.
• Balance security, operational and business requirements when making architectural decisions.

• Collaborate with Enterprise Architects, Solution Architects, Cloud Engineers, Infrastructure Teams and Delivery Managers.
• Communicate security risks and recommendations to both technical and non-technical stakeholders.
• Build strong relationships across technology and programme teams.
• Promote secure design principles and architectural best practice.
• Mentor architects and engineers in secure systems design.

• Keep up to date with developments in cloud computing, platform engineering, infrastructure security and emerging technologies.
• Contribute to the enhancement of security standards, architecture frameworks and governance processes.
• Share knowledge and best practice across security, architecture and engineering communities.
• Support ongoing improvements in security assurance and systems engineering practices.

• Proven experience as a Security Architect within complex enterprise, government, defence or highly regulated environments.
• Strong knowledge of cloud architecture and cloud security across IaaS, PaaS and SaaS platforms.
• Experience with hybrid and on-premise infrastructure architectures.
• Strong understanding of secure system design, security architecture patterns and security controls.
• Experience conducting threat modelling, security architecture reviews and risk assessments.
• Ability to support and influence risk-based decision making at programme and enterprise level.
• Experience developing architecture standards, governance frameworks and security patterns.
• Knowledge of networking, identity and access management (IAM), platform security and security monitoring.
• Excellent stakeholder management, communication and influencing skills.

• Experience with Cloud Systems Engineering and Model-Based Systems Engineering (MBSE).
• Experience supporting cloud migration and digital transformation programmes.
• Knowledge of Zero Trust architectures and modern enterprise security frameworks.
• Experience working within MOD, Defence Digital, Government or National Security environments.
• Understanding of cryptographic services, PKI, key management systems and Hardware Security Modules (HSMs).
• Relevant certifications such as CISSP, SABSA, CCSK, CCSP, TOGAF, Azure Security Engineer, AWS Security Specialty or equivalent.