DV Cleared Security Architect for Air-Gapped Platforms

Energy Jobline ZR; Salisbury; Hybrid; GBP 87,000 - 118,000; Full time

Job summary

Energy Jobline ZR is seeking a skilled DV cleared Security Architect to design and deliver secure backend platform and endpoint security for a UK Government environment. You will work across offline and air-gapped setups, applying NIST CSF principles and MOD policies while collaborating with infrastructure and security teams.

The role requires hands-on and architectural expertise in endpoint protection, EDR, vulnerability management and secure environments.

Qualifications

• Proven experience in secure, regulated or high-assurance environments.
• Design and implement platform security controls including endpoints, AV/EDR and vulnerability management.
• Experience with offline/air-gapped environments and secure data transfer.

Responsibilities

• Lead the architecture, design and implementation of endpoint and platform security solutions.
• Design security controls aligned with MOD policies, NIST CSF and NCSC guidance.
• Develop vulnerability management capabilities including scanning, prioritisation, remediation and reporting.
• Create security solutions for offline environments including controlled updates and signatures.
• Establish secure data transfer and threat intel ingestion in disconnected environments.
• Define vulnerability scanning regimes and remediation processes.
• Advise on endpoint hardening, firewall rules, ports and protocols.
• Produce penetration testing scopes for back end platforms and endpoints.
• Maintain security architecture documentation and SOPs.

Skills

Security Architect

Endpoint security

Vulnerability management

Air-gapped environments

MOD policies

NIST CSF

Threat intelligence

Job description

Energy Jobline ZR is seeking a skilled DV cleared Security Architect to design and deliver secure backend platform and endpoint security for a UK Government environment. You will work across offline and air-gapped setups, applying NIST CSF principles and MOD policies while collaborating with infrastructure and security teams.

The role requires hands-on and architectural expertise in endpoint protection, EDR, vulnerability management and secure environments.