Maritime Security Architect — OT/IT/Network & Physical

Expleo UK LTD; Gloucester; On-site; GBP 80,000 - 120,000; Full time

Job summary

Expleo UK is seeking a hands-on Security Architect to define and ensure the security architecture for a major UK defence maritime programme. You will own the asset baseline and translate risk into segmentation, controls and defensible design decisions, collaborating with naval architects, systems engineers, and subsystem owners.

You will work across OT, IT, networks and physical security, ensuring fail-safe architecture and traceability to the Security Management Plan guiding design reviews.

Qualifications

• Relevant education or industry-recognised certifications in security architecture, cybersecurity, secure engineering, OT security or related discipline.
• Possible qualifications include BSc, MSc, CISSP, CISM, CRISC, CCP, ISA/IEC 62443 (Fundamentals Specialist, Risk Assessment Specialist, Design Specialist or Expert), SABSA, TOGAF, CCNP, OSCP or ISO 27001 Lead Implementer/Lead Auditor.

Responsibilities

• Develop the security architecture for OT and IT in coordination with the digital system integrator and sub-system owners, and produce the preliminary security architecture design.
• Partition the platform into zones and conduits in accordance with IEC 62443, setting target security levels based on safety and mission consequences.
• Review the network architecture and communications security, and provide advice on resilience of remote command-and-control links and of position, navigation, and timing.
• Produce the network security architecture in coordination with the digital teams.
• Review the physical security provision in the design and develop appropriate protection measures.
• Define trust boundaries, segregation, secure configuration baselines, identity and access management, and secure remote access requirements.
• Build and structure the initial asset register for configuration control, capturing criticality, zone, ownership and dependency attributes.
• Support threat modelling and security risk assessment from an architecture perspective, and translate risk into architectural controls.
• Define architecture-level security requirements and maintain traceability into the wider requirements specification.
• Assure that architectural controls are fail-safe and do not defeat safety functions, in collaboration with safety and engineering colleagues.
• Provide architectural evidence and materials for internal and external design reviews, including system design reviews, and close out resulting actions.
• Contribute to supplier and interface security requirements where these bear on the architecture, including third-party payload and control-system interfaces.

Skills

Secure-by-design

IT and OT understanding

Risk translation

Architectural leadership

Education

BSc

MSc

CISSP

CISM

CRISC

ISA/IEC 62443 Fundamentals Specialist

SABSA

TOGAF

CCNP

Job description

Expleo UK is seeking a hands-on Security Architect to define and ensure the security architecture for a major UK defence maritime programme. You will own the asset baseline and translate risk into segmentation, controls and defensible design decisions, collaborating with naval architects, systems engineers, and subsystem owners.

You will work across OT, IT, networks and physical security, ensuring fail-safe architecture and traceability to the Security Management Plan guiding design reviews.