JDT Security Assurance Architect - secure on-site Hampshire

DXC Technology Morocco; Farnborough; On-site; GBP 90,000 - 120,000; Full time

Job summary

DXC Technology in the UK Farnborough Defence Hub seeks a Security Architect (Joint Design Team) to lead security architecture, design authority and assurance for defence programmes. You will define secure solution architectures, model threats, apply Zero Trust and ensure JSP 440 and NCSC guidance compliance from the outset.

You will collaborate with Client Delivery Teams and risk owners to embed Secure by Design early, lead security input to design reviews, and produce architecture documentation

Qualifications

• Experience in security architecture across on-premises, hybrid and cloud environments.
• Ability to lead design reviews and influence multi-stakeholder teams.
• Familiarity with JSP 440, UK GOV security policies and NCSC guidance.

Responsibilities

• Define security architecture, design patterns and controls for defence IT solutions.
• Develop and validate threat models and security assumptions behind IT designs.
• Apply Zero Trust principles to secure multi-environment hosting designs.
• Produce security requirements matrices and maintain documentation through life cycle.

Skills

Security architecture

Threat modelling

Leadership

Zero Trust

Cloud security

Education

Bachelor's degree in a related field

Tools

TOGAF

SABSA

Job description

Job Description:Security Architect (Joint Design Team)Location: Farnborough, Hampshire, UKEmployment Type: Permanent, Full-TimeTravel: Up to 10% UK-wide and customer sitesDue to the nature of the work and the customers we support, the successful candidate must be eligible to meet UK Government and contractual personnel security requirements, including the applicable residency requirements for the role, and have the right to work in the United Kingdom. Some roles may also be subject to nationality requirements where these are necessary to meet UK Government or contractual security obligations.About DXC TechnologyDXC Technology is a Fortune 500 company delivering mission-critical IT solutions globally. Our Aerospace and Defence Hub in Farnborough works on sensitive defence programmes requiring highest security standards and rigorous assurance practices.About the RoleThe Security Architect (Joint Design Team) leads security architecture, design authority and assurance for defence and aerospace IT programmes. Acting as the security design authority within Joint Design Teams, you will define secure solution architectures and security patterns for proposed IT solutions, ensure solutions meet Secure by Design and JSP 440 (The Defence Manual of Security) requirements from the outset, identify security risks, and specify security controls. Working alongside the Client Delivery Team, Client risk owners and other suppliers, this role requires strong security knowledge, architectural judgement and the ability to lead and influence technical architects and Client teams.Key ResponsibilitiesSecurity Architecture, Design & AssuranceAct as security design authority, defining the security architecture, design patterns and security controls for proposed IT solutions against Client security requirementsDevelop and validate threat models and the security assumptions underlying IT designsDesign security architectures for multi-classification environments (OFFICIAL, SECRET and above), including domain separation, cross-domain solutions and browse-down patternsApply Zero Trust principles to secure on-premises, hybrid and cloud defence hosting designsSpecify cryptographic architecture and key management approaches, including the use of National Cyber Security Centre (NCSC)-approved cryptographic products and the secure handling of cryptographic materialDefine emissions security (TEMPEST) and physical separation requirements for SECRET and above environmentsClient Compliance & Standards AlignmentEnsure IT designs are architected to comply with JSP 440 (The Defence Manual of Security), Client Secure by Design, Government Security Classifications Policy, Classification Guides, Def Stan 05-138 and NCSC guidanceEmbed UK export controls (Export Control Order 2008) and, where applicable, US International Traffic in Arms Regulations (ITAR) requirements into solution designsEmbed supply-chain security requirements into solution designs, including supplier assurance, hardware and software provenance, and flow-down of Def Stan 05-138 obligationsDesign data handling and classification models, and address personnel security and vetting requirements within the designJoint Design Team LeadershipLead security input to Joint Design Team meetings and architecture workshops, shaping infrastructure, network and application architecture decisionsReview proposed solutions from a security perspective, challenge assumptions and design secure alternatives that embed Secure by Design principles early in the design phaseSupport security decision-making through architectural options analysisIntegrate security across multi-supplier designs, coordinating with the Client Delivery Team, risk owners and other suppliersArchitecture Documentation & ReportingProduce security architecture and design documentation, including security specifications, control specifications and implementation guidanceCreate security requirements matrices and compliance traceability matricesMaintain the security architecture and its documentation through life, assessing the security impact of design changes after go-liveRisk-Driven Design & Mitigation PlanningConduct security risk assessments and use the outputs to prioritise architectural controls and inform design trade-offsIdentify residual security risks, design appropriate mitigation strategies and track mitigation through implementationLead risk management activities and produce Secure by Design evidence to support Client risk owners in accepting residual riskSecurity Assurance & ValidationDefine security test plans and assurance approaches that demonstrate security controls operate as designedValidate implementation of security controls against the approved security architectureLead the security architecture contribution to Secure by Design assurance activitiesStakeholder Engagement & InfluenceLead security design discussions with Client security teams, communicating architecture decisions, their implications and executive summaries clearly to technical and non-technical stakeholdersRepresent security at design reviews and programme governance boards, defending architectural decisionsEssential RequirementsExperience & ExpertiseMinimum 8 years' information security experience, including a security architecture or design assurance roleDemonstrated experience designing secure solutions across on-premises, hybrid and cloud environments, and leading security design reviewsStrong background in defence, aerospace or national security programmesExperience delivering Secure by Design (or equivalent security assurance) outcomesExperience providing technical leadership or acting as security design authority in a security or Joint Design Team functionStrong expertise in IT architecture and design principles, security reference architectures and architecture frameworks (e.g. SABSA, TOGAF)Eligible for, and willing to undergo, DV clearanceTechnical KnowledgeStrong knowledge of IT security controls and network, infrastructure, application and data securityStrong knowledge of multi-classification architectures, cross-domain solutions and Zero Trust principlesWorking knowledge of communications security (COMSEC) and NCSC-approved cryptographic productsStrong knowledge of threat modelling and risk assessment methodologiesWorking knowledge of MOD security requirements as applied to industry (e.g. Security Aspects Letters, Defence Conditions (DEFCONs), Def Stan 05-138 and GovS 007: Security), MOD Secure by Design, Government Security Classifications Policy and MOD Classification GuidesWorking knowledge of UK export controls and, where applicable, ITAR requirementsWorking knowledge of security standards (Cyber Essentials Plus, NCSC guidance, ISO/IEC 27001, NIST SP 800-53 and the NIST Cybersecurity Framework (CSF))Personal AttributesStrong architectural thinking, analytical and problem-solving skills, with the ability to identify design gaps, inconsistencies and security trade-offsStrong technical leadership and influencing skills, with a collaborative approach to working with architects and technical teamsExcellent written and verbal communication skills, including the ability to explain complex security concepts clearlyConfidence to make, defend and challenge design decisions on security groundsDesirable RequirementsCurrent, active DV clearance enabling an immediate startCISSP, CISM, SABSA, UKCSC Security Architecture or equivalent security certificationExperience applying the NCSC Cyber Assessment Framework (CAF)Knowledge of Common Criteria or other formal security evaluation frameworksHands-on experience of COMSEC arrangements and the deployment of NCSC-approved (high-grade) cryptographic productsWorking knowledge of emissions security (TEMPEST) and supply-chain security in a defence contextExperience using the MOD-mandated NATO Architecture Framework (NAF) v4Familiarity with defence acquisition and programme delivery lifecycles (e.g. CADMID/CADMIT)Background in systems engineering or infrastructure engineeringWhat We OfferCompetitive salary and benefits packageEnhanced pension and private medical insuranceFlexible working arrangements, noting this role is based on a customer site with onsite attendance during the working weekProfessional development and security training support, including training in specialist areas such as TEMPEST, supply-chain security and NAF v4 where requiredOpportunity to work on high-impact defence programmesExposure to cutting-edge defence technology and security challengesApplication Process & Security VettingApplicants should be aware that:An offer of employment is subject to satisfactory completion of background checks and security vettingEqual OpportunitiesDXC Technology is an equal opportunities employer committed to building diverse, inclusive teams. We welcome applications from all backgrounds and are committed to creating an inclusive recruitment process.At DXC Technology, we believe strong connections and community are key to our success. Our work model prioritizes in-person collaboration while offering flexibility to support wellbeing, productivity, individual work styles, and life circumstances. We’re committed to fostering an inclusive environment where everyone can thrive.Recruitment fraud is a scheme in which fictitious job opportunities are offered to job seekers typically through online services, such as false websites, or through unsolicited emails claiming to be from the company. These emails may request recipients to provide personal information or to make payments as part of their illegitimate recruiting process. DXC does not make offers of employment via social media networks and DXC never asks for any money or payments from applicants at any point in the recruitment process, nor ask a job seeker to purchase IT or other equipment on our behalf. More information on employment scams is available here.