Domain Architect - IT security

HCL Technologies; Bagstone; Vor Ort; GBP 110.000 - 140.000; Vollzeit

Zusammenfassung

HCL Technologies Limited is seeking a Cyber Security Architect (Cloud & Enterprise Security) to design, govern, and enhance security architecture across enterprise platforms and cloud environments. The role requires leadership, strategic thinking, and hands-on expertise to align security with business goals while ensuring regulatory compliance.

The candidate will work with IAM, endpoint, network security, cryptography, and cloud security across Azure, AWS, and GCP, guiding secure solution

Qualifikationen

• Experience in security architecture for cloud, applications, and infrastructure.
• Threat modelling using STRIDE and MITRE ATT&CK methodologies.
• Capability to align security controls with business objectives and compliance.

Aufgaben

• Develop and maintain enterprise security architecture frameworks and reference designs.
• Lead security reviews for cloud, applications, and digital transformation.
• Collaborate with DevOps to embed security into Agile/DevSecOps.
• Define security requirements for APIs, microservices, and cloud platforms.
• Guide incident investigations with architectural expertise.

Kenntnisse

Security architecture principles

Cloud security

IAM

Endpoint security

Network security

cryptography

Kubernetes

RESTful APIs

Threat modelling (STRIDE)

DevSecOps

Compliance standards

Ausbildung

Bachelor's degree in Computer Science, Information Security, Engineering

CISSP / CISM / CCSP / SABSA / TOGAF

CEH / OSCP / GIAC / Azure Security Engineer / AWS Security Specialty

Tools

AWS

Azure

GCP

Kubernetes

Jobbeschreibung

Job Summary Job Description - Cyber Security Architect (Cloud & Enterprise Security) Job Summary The Cyber Security Architect will be responsible for designing, governing, and enhancing the organization's security architecture across enterprise platforms, cloud environments, applications, and infrastructure. The role requires a strategic and hands‑on security professional who can align cyber security controls with business objectives while ensuring compliance with industry standards and regulatory requirements. The successful candidate will possess deep expertise in modern enterprise technologies including Cloud, AI, APIs, and containerized microservices. They will evaluate security risks, perform threat modelling, and provide architectural guidance for secure solution delivery. The individual will work closely with engineering, operations, risk, and business stakeholders to ensure security is embedded throughout the technology lifecycle. Strong knowledge of security domains such as
Identity and Access Management, endpoint security, network security, cryptography, and cloud security is essential. This role requires leadership, technical excellence, and the ability to influence secure technology decisions across large-scale enterprise environments.

Key Responsibilities

• Develop and maintain enterprise security architecture frameworks, standards, and reference designs.
• Lead security reviews and provide architectural guidance for cloud, application, infrastructure, and digital transformation initiatives.
• Conduct threat modelling exercises using industry methodologies such as STRIDE and MITRE ATT&CK; to identify and mitigate cyber risks.
• Collaborate with development and operations teams to embed security controls into Agile and DevSecOps practices.
• Evaluate emerging technologies, cloud services, and AI solutions from a security perspective.
• Define security requirements for APIs, microservices, cloud platforms, and third‑party integrations.
• Support security incident investigations by providing architectural expertise and remediation guidance.
• Ensure alignment with applicable security standards including ISO 27001, NIST, OWASP, PCI DSS, and COBIT.
• Work with governance, risk, and compliance teams to manage security risks and audits.
• Mentor security engineers and stakeholders while promoting security awareness and best practices across enterprise technology programs.

Skill Requirements

• Strong understanding of enterprise cyber security concepts, security architecture principles, and risk management practices.
• Proven experience with cloud technologies including Azure, AWS, or GCP, along with securing hybrid and multi‑cloud environments.
• Extensive knowledge of Identity and Access Management, endpoint security, network security, encryption technologies, privileged access management, and security monitoring solutions.
• Hands‑on experience with RESTful APIs, containerized microservices, Kubernetes, and modern application architectures.
• Expertise in threat modelling methodologies such as STRIDE and MITRE ATT&CK.
• Understanding of secure software development practices, DevSecOps, vulnerability management, and cloud‑native security controls.
• Familiarity with industry standards and frameworks including ISO 27001, NIST, PCI DSS, OWASP, and COBIT.
• Strong analytical, problem‑solving, and stakeholder management skills.
• Ability to communicate complex security concepts to technical and non‑technical audiences while balancing business requirements with effective security controls and risk mitigation strategies.

Other Requirements

• Bachelor's degree in Computer Science, Information Security, Engineering, or a related discipline, or equivalent industry experience.
• Professional certifications such as CISSP, CISM, CCSP, SABSA, TOGAF, or equivalent security architecture qualifications are highly desirable.
• Technical certifications including CEH, OSCP, GIAC, Azure Security Engineer, AWS Security Specialty, or related credentials will be advantageous.
• Demonstrated experience working in large enterprise organizations with complex technology landscapes.
• Strong communication, documentation, presentation, and stakeholder engagement capabilities.
• Ability to influence senior leadership and drive security initiatives across multiple teams.
• Experience participating in technology governance boards, audit reviews, and risk assessments.
• Understanding of regulatory and compliance obligations relevant to financial services and highly regulated industries is preferred.
• Self‑motivated professional with excellent organizational skills, attention to detail, and the ability to manage multiple priorities within a fast‑paced and evolving technology environment.

Additional Request (Job Description)

The ideal candidate will serve as a trusted security advisor and strategic partner for technology and business teams. They will contribute to the secure adoption of cloud platforms, emerging technologies, AI-driven solutions, and enterprise modernization programs. The role demands a balance of strategic thinking and technical execution, enabling the architect to translate business objectives into secure and scalable technology solutions. Candidates should demonstrate a proactive approach toward identifying security gaps, recommending improvements, and driving remediation activities. Experience working with cross-functional teams in Agile delivery environments is essential. The successful candidate should have a passion for cyber security innovation, continuous learning, and operational
excellence. They must be capable of leading complex security initiatives, influencing architectural decisions, and fostering a security‑first culture across the organization. Previous experience within banking, financial services, insurance, or other highly regulated industries will be considered a strong advantage.