Principal Security Architect - Hybrid Cloud Security

Ofgem; Cardiff, Greater London, Glasgow; Hybrid; GBP 57,000 - 70,000; Full time

Benefits offered by this job

30 days annual leave after 2 years

Civil Service pension

Training & development opportunities

Hybrid working

Flexible working hours

Job summary

Ofgem is seeking a Principal Security Architect to provide strategic leadership and deep technical expertise, ensuring secure design across systems and programs. You will operate at the highest levels, shaping long-term security strategy while engaging with senior stakeholders.

You will embed secure development practices, guide risk-based decisions, and supervise security architecture artefacts and supplier deliverables within a hybrid, office-based and flexible environment.

Qualifications

• Expert-level security architecture and secure design implementation
• Experience leading security design and assurance in cloud and hybrid transformations
• Proficiency in architectural modelling tools (Archi, ArchiMate, UML)

Responsibilities

• Embed secure-by-design principles across development and digital services
• Provide expert advice on complex security architecture challenges
• Lead security architecture assurance activities aligned with CAF and NCSC guidance
• Influence strategic and architectural decisions with senior stakeholders
• Develop long-term security architecture strategies, principles and standards
• Lead secure development lifecycle across engineering teams
• Oversee IT estate security posture and drive improvements
• Champion security tooling and integrate into delivery pipelines
• Manage risk registers and mitigate security, privacy and resilience risks
• Assure security architecture artefacts for projects and supplier contracts
• Support governance via Technical Design Authority forums

Skills

Security architecture leadership

Secure design implementation

Cloud security (Azure)

Architectural modelling (Archi, UML)

Stakeholder engagement

Education

CISSP/CCSP/SABSA or equivalent

BCS EA Certification or equivalent

Tools

Archi

ArchiMate

UML

Job description

Ofgem is seeking a Principal Security Architect to provide strategic leadership and deep technical expertise, ensuring secure design across systems and programs. You will operate at the highest levels, shaping long-term security strategy while engaging with senior stakeholders.

You will embed secure development practices, guide risk-based decisions, and supervise security architecture artefacts and supplier deliverables within a hybrid, office-based and flexible environment.