Domain Architect - IT security

HCL Technologies; West of England; On-site; GBP 100,000 - 150,000; Full time

Job summary

HCL Technologies Limited is seeking a Cyber Security Architect (Cloud & Enterprise Security) to design and govern security architecture across enterprise platforms, cloud environments, applications and infrastructure. The role combines strategic leadership with hands-on security expertise to align controls with business objectives and regulatory requirements.

The candidate will lead threat modelling, security reviews, and collaboration with engineering, risk, and governance teams, ensuring

Qualifications

• Bachelor's degree in Computer Science, Information Security, Engineering, or related field; equivalent experience.
• CISSP, CISM or equivalent security architecture qualifications are highly desirable.
• Azure Security Engineer, AWS Security Specialty, or related credentials are advantageous.
• Experience in large enterprise environments with complex technology stacks is preferred.
• Strong communication, documentation, and stakeholder engagement abilities.
• Ability to influence senior leadership and drive security initiatives across teams.

Responsibilities

• Develop and maintain enterprise security architecture frameworks, standards, and reference designs.
• Lead security reviews and provide architectural guidance for cloud, application, infrastructure and digital transformation.
• Conduct threat modelling using STRIDE and MITRE ATT&CK to identify and mitigate risks.
• Collaborate with development and operations to embed security controls in Agile and DevSecOps.
• Evaluate emerging technologies, cloud services, and AI solutions from a security perspective.
• Define security requirements for APIs, microservices, cloud platforms and third-party integrations.
• Support security incident investigations with architectural expertise and remediation guidance.
• Ensure alignment with ISO 27001, NIST, PCI DSS, OWASP, COBIT.
• Work with governance, risk, and compliance teams to manage security risks and audits.
• Mentor security engineers and promote security awareness across programs.

Skills

Security architecture

Risk management

Security governance

Stakeholder communication

Agile / DevSecOps

Threat modelling

Cloud security

Enterprise security controls

Security operations

Education

Bachelor's degree in Computer Science / Information Security / Engineering

CISSP

CISM

CCSP

TOGAF

CEH / OSCP / GIAC

Tools

Azure

AWS

GCP

Kubernetes

RESTful APIs

Job description

Job Summary Job Description - Cyber Security Architect (Cloud & Enterprise Security) Job Summary The Cyber Security Architect will be responsible for designing, governing, and enhancing the organization's security architecture across enterprise platforms, cloud environments, applications, and infrastructure. The role requires a strategic and hands‑on security professional who can align cyber security controls with business objectives while ensuring compliance with industry standards and regulatory requirements. The successful candidate will possess deep expertise in modern enterprise technologies including Cloud, AI, APIs, and containerized microservices. They will evaluate security risks, perform threat modelling, and provide architectural guidance for secure solution delivery. The individual will work closely with engineering, operations, risk, and business stakeholders to ensure security is embedded throughout the technology lifecycle. Strong knowledge of security domains such as
Identity and Access Management, endpoint security, network security, cryptography, and cloud security is essential. This role requires leadership, technical excellence, and the ability to influence secure technology decisions across large-scale enterprise environments.

Key Responsibilities

• Develop and maintain enterprise security architecture frameworks, standards, and reference designs.
• Lead security reviews and provide architectural guidance for cloud, application, infrastructure, and digital transformation initiatives.
• Conduct threat modelling exercises using industry methodologies such as STRIDE and MITRE ATT&CK; to identify and mitigate cyber risks.
• Collaborate with development and operations teams to embed security controls into Agile and DevSecOps practices.
• Evaluate emerging technologies, cloud services, and AI solutions from a security perspective.
• Define security requirements for APIs, microservices, cloud platforms, and third‑party integrations.
• Support security incident investigations by providing architectural expertise and remediation guidance.
• Ensure alignment with applicable security standards including ISO 27001, NIST, OWASP, PCI DSS, and COBIT.
• Work with governance, risk, and compliance teams to manage security risks and audits.
• Mentor security engineers and stakeholders while promoting security awareness and best practices across enterprise technology programs.

Skill Requirements

• Strong understanding of enterprise cyber security concepts, security architecture principles, and risk management practices.
• Proven experience with cloud technologies including Azure, AWS, or GCP, along with securing hybrid and multi‑cloud environments.
• Extensive knowledge of Identity and Access Management, endpoint security, network security, encryption technologies, privileged access management, and security monitoring solutions.
• Hands‑on experience with RESTful APIs, containerized microservices, Kubernetes, and modern application architectures.
• Expertise in threat modelling methodologies such as STRIDE and MITRE ATT&CK.
• Understanding of secure software development practices, DevSecOps, vulnerability management, and cloud‑native security controls.
• Familiarity with industry standards and frameworks including ISO 27001, NIST, PCI DSS, OWASP, and COBIT.
• Strong analytical, problem‑solving, and stakeholder management skills.
• Ability to communicate complex security concepts to technical and non‑technical audiences while balancing business requirements with effective security controls and risk mitigation strategies.

Other Requirements

• Bachelor's degree in Computer Science, Information Security, Engineering, or a related discipline, or equivalent industry experience.
• Professional certifications such as CISSP, CISM, CCSP, SABSA, TOGAF, or equivalent security architecture qualifications are highly desirable.
• Technical certifications including CEH, OSCP, GIAC, Azure Security Engineer, AWS Security Specialty, or related credentials will be advantageous.
• Demonstrated experience working in large enterprise organizations with complex technology landscapes.
• Strong communication, documentation, presentation, and stakeholder engagement capabilities.
• Ability to influence senior leadership and drive security initiatives across multiple teams.
• Experience participating in technology governance boards, audit reviews, and risk assessments.
• Understanding of regulatory and compliance obligations relevant to financial services and highly regulated industries is preferred.
• Self‑motivated professional with excellent organizational skills, attention to detail, and the ability to manage multiple priorities within a fast‑paced and evolving technology environment.

Additional Request (Job Description)

The ideal candidate will serve as a trusted security advisor and strategic partner for technology and business teams. They will contribute to the secure adoption of cloud platforms, emerging technologies, AI-driven solutions, and enterprise modernization programs. The role demands a balance of strategic thinking and technical execution, enabling the architect to translate business objectives into secure and scalable technology solutions. Candidates should demonstrate a proactive approach toward identifying security gaps, recommending improvements, and driving remediation activities. Experience working with cross-functional teams in Agile delivery environments is essential. The successful candidate should have a passion for cyber security innovation, continuous learning, and operational
excellence. They must be capable of leading complex security initiatives, influencing architectural decisions, and fostering a security‑first culture across the organization. Previous experience within banking, financial services, insurance, or other highly regulated industries will be considered a strong advantage.