Endpoint & Hardware Security Lead — SC/DV Cleared

ByDesign Secure Systems Ltd; West of England; Hybrid; GBP 90,000 - 150,000; Full time

Job summary

ByDesign Secure Systems Ltd is seeking an experienced Endpoint & Hardware Platform Security Lead to drive secure, mission-critical systems in a multi-year transformation for UK government projects. The role emphasizes hardware root-of-trust, endpoint hardening, and cross-team collaboration.

You will operate in a hybrid environment with occasional on-site work in London or Bristol, requiring active UK SC or DV clearance and citizenship.

Qualifications

• 7+ Years in Endpoint Security & Platform Hardware Hardening.
• Hands-on with TPM 2.0, Secure Boot, Windows/Linux/macOS hardening, BitLocker/FileVault/LUKS.
• Experience in highly regulated or classified environments.
• Able to communicate complex security concepts to non-technical stakeholders.
• Proven ability to produce high-quality design documents and runbooks.

Responsibilities

• Establish hardware root-of-trust, platform attestation, and OS baselines.
• Implement hardware security controls (TPM 2.0, Secure Boot, UEFI lockdown).
• Develop Windows, Linux, macOS hardening baselines for endpoints.
• Deploy disk encryption and endpoint security agents across devices.
• Operate in air-gapped and security-sensitive environments with compliance.
• Collaborate with architecture, security and engineering teams.
• Create and maintain High-Level Designs, CLDs, LLDs and runbooks.
• Present designs and plans through governance and Technical Design Authority processes.

Skills

Endpoint Security

Platform Hardening

Hardware Root of Trust

Cross-functional Communication

Technical Documentation

Tools

TPM 2.0

Secure Boot

UEFI Lockdown

Disk Encryption

EDR/EPP Agents

Job description

ByDesign Secure Systems Ltd is seeking an experienced Endpoint & Hardware Platform Security Lead to drive secure, mission-critical systems in a multi-year transformation for UK government projects. The role emphasizes hardware root-of-trust, endpoint hardening, and cross-team collaboration.

You will operate in a hybrid environment with occasional on-site work in London or Bristol, requiring active UK SC or DV clearance and citizenship.