Lead Security Architect

UK Home Office; Sheffield; On-site; GBP 70,000 - 90,000; Full time

Job summary

A government agency in the UK is looking for a Lead Security Architect to oversee the secure delivery of critical systems. This role involves managing security architecture across significant portfolios and translating business objectives into effective controls. The ideal candidate will have strong technical expertise in cloud security, risk management, and mentoring capabilities. Additionally, you'll work with senior stakeholders to ensure security is embedded in agile delivery practices. A minimum of 3 years UK residency is required for SC Clearance eligibility.

Qualifications

• Demonstrable track record creating or validating architectures for large-scale services using recognized frameworks.
• Expert in ISO 27001 / NIST / CIS controls, able to quantify and articulate risk.
• Hands-on knowledge of cloud security, IAM, container & API security.
• Experience in scoping and translating pentest results into enforceable patterns.
• Ability to engage C-suite and delivery squads, adapting communication style as needed.
• Experience line managing Security Architects/Engineers.

Responsibilities

• Set portfolio level vision & patterns and translate them into reusable templates.
• Lead architecture reviews for high risk projects.
• Advise on security controls for hybrid and cloud platforms.
• Mentor Security Architects and foster continuous learning.
• Engage senior stakeholders across technology, policy, and operations.
• Oversee vendor and SaaS evaluations for appropriate security clauses.

Skills

Secure system design leadership

Risk based decision making

Technical depth

Pentesting & threat modelling

Influential communication

Mentoring & governance

Job description

Join the Home Office as a Lead Security Architect and lead the secure‑by‑design delivery of critical systems that protect citizens and national interests. You will own security architecture across a major portfolio, translating business objectives and emerging threats into practical, proportionate controls while enabling modern approaches such as cloud, DevSecOps and zero trust. Working closely with senior stakeholders, delivery teams and enterprise architects, you will balance risk, usability and cost, embed security into agile delivery, and shape reusable patterns that strengthen services at scale. This is a unique opportunity to combine deep technical expertise with strategic influence, driving security outcomes across high‑impact programmes while mentoring others and raising capability across the organisation.

What you will do

• Set portfolio level vision & patterns in line with Principal Security Architect strategy, translating them into reusable templates and guardrails.
• Lead architecture reviews for high risk projects, providing actionable recommendations and tracking remediation through to closure.
• Perform and interpret threat modelling / pentest results, converting findings into road mapped improvements and measurable risk reductions.
• Advise on security controls for hybrid and cloud platforms (AWS, Azure, Kubernetes, serverless), balancing usability, cost and compliance.
• Mentor and quality assure Security Architects’ work, fostering a culture of continuous learning and knowledge sharing.
• Engage senior stakeholders across technology, policy and operations, presenting security trade‑offs in business terms and gaining consensus.
• Scan the horizon for emerging threats, tooling and regulatory change, recommending timely adoption or mitigation strategies.
• Oversee vendor and SaaS evaluations, ensuring contracts include appropriate security clauses and ongoing assurance.

What you will bring (Essential Skills)

• Secure system design leadership: demonstrable track record creating or validating architectures for largescale, high risk services using recognised frameworks (SABSA, TOGAF, NCSC).
• Risk based decision making: expert in ISO 27001 / NIST / CIS controls, able to quantify and articulate risk, then select proportionate, cost effective controls.
• Technical depth: hands on knowledge of cloud security, IAM, container & API security, network segmentation, encryption and DevSecOps toolchains; capable of explaining exploitability of complex vulnerabilities.
• Pentesting & threat modelling: scoping, overseeing and translating results into enforceable patterns and backlog items.
• Influential communication: demonstrate ability to engage Csuite and delivery squads alike, adapting style to gain agreement and drive secure by design culture.
• Mentoring & governance: experience line managing or coaching Security Architects/Engineers and running architecture assurance or design review boards.

Additional Information

Your CV and Personal Statement will both be assessed. Your Personal Statement should clearly evidence your experience against the essential skills, using the STAR method (Situation, Task, Action, Result). Make full use of the word count to create a comprehensive and compelling application. STAR - https://lnkd.in/gs8mx4WN

Useful support on Home Office recruitment process including: Success Profiles tips video, Personal

Information on the Pay Framework Allowance (PFA) - https://lnkd.in/e3YnyGdG

Discover more about our work by watching this DDaT video https://lnkd.in/e4aHnawp

Please note - 3+ years UK residency is typically required to be eligible for SC Clearance and unfortunately we cannot offer sponsorship.