Security Architect

DATA CAREERS LIMITED; Andover; Hybrid; GBP 100,000 - 110,000; Full time

Job summary

DATA CAREERS LIMITED is looking for an SC Cleared Security Architect for a permanent position in Andover (Hybrid - onsite 2 days a week). In this senior role, you will provide assurance and guidance across complex UK Government and Defence systems.

The successful candidate will have strong UK Defence experience with proven capabilities in security architecture, risk management, and documentation. The role also involves leading architecture reviews and engaging with technical and non-technical stakeholders.

Qualifications

• Active SC clearance.
• Proven background as a Security Architect, Cyber Security Architect or Security Consultant.
• Strong understanding of secure design principles.

Responsibilities

• Lead security architecture reviews across complex Defence or Central Government systems.
• Identify risks and design changes to achieve the required security posture.
• Produce and maintain security architecture artefacts.

Skills

Security architecture assurance

Risk management

Cybersecurity

Strong communication skills

Education

CISSP, CISM, ISO27001 Lead Auditor, Microsoft Cybersecurity Architect, AWS Security or similar certifications

Tools

Sparx Enterprise Architect

ArchiMate

Job description

Security Architect
Permanent
Location: Home / Andover (Hybrid - onsite 2 days a week)
Salary: £100,000 - £110,000 (+ benefits)

We are looking to recruit an SC Cleared Security Architect for a leading technology consultancy who deliver complex, business-critical solutions into secure UK Government and Defence environments.

They are looking for an experienced Security Architect to support major programmes of work, providing security architecture assurance, risk oversight and secure design guidance across complex systems and capabilities.

This is a senior, client-facing role suited to someone who can operate confidently across architecture, cyber security, assurance and delivery teams. You will review solution designs, identify security risks, recommend proportionate controls and produce high-quality architecture artefacts for senior technical and non-technical stakeholders.

The role would suit a Security Architect with strong UK Defence experience, ideally gained across Army, MOD or similarly secure government programmes.

Key responsibilities

• Lead security architecture reviews across complex Defence or Central Government systems and programmes.
• Identify risks, control gaps and design changes required to achieve the required security posture.
• Produce and maintain security architecture artefacts, including HLDs, LLDs, data flows, security principles, patterns and architecture building blocks.
• Ensure security is embedded across solution design, integration, deployment and operational readiness.
• Support cyber assurance activity across design, build, deploy and run phases.
• Work closely with enterprise architects, solution architects, delivery teams, security stakeholders and customer representatives.
• Translate complex security risks and design issues into clear options, recommendations and decision papers.
• Support alignment to relevant Defence, Government and industry security standards.
• Contribute to technical management plans, covering areas such as configuration standards, patching, cryptography, IAM and assurance checkpoints.
• Provide confident stakeholder engagement across mixed technical, operational and senior leadership audiences.
• Active SC clearance.
• Strong UK Defence, MOD or secure Central Government experience.
• Proven background as a Security Architect, Enterprise Security Architect, Cyber Security Architect or Security Consultant.
• Experience providing security architecture assurance across complex systems or major programmes.
• Ability to produce clear architecture documentation and security artefacts.
• Strong understanding of secure design principles, risk management, threat modelling and security controls.
• Knowledge of UK Government / Defence security standards, guidance and assurance processes.
• Experience working with senior stakeholders across security, architecture, engineering and delivery.
• Strong communication skills, with the ability to explain security risk clearly to technical and non-technical audiences.
• Army programme experience or strong MOD stakeholder exposure.
• Experience with Sparx Enterprise Architect, ArchiMate, NAFv4 or similar modelling approaches.
• Knowledge of Joint Service Publications, NCSC guidance, ISO27001, NIST, CIS or related security frameworks.
• Experience across IAM, PKI, secure integration, cloud security, data flows and security architecture patterns.
• Experience reviewing HLDs, LLDs, current-state and future-state designs.
• CISSP, CISM, ISO27001 Lead Auditor, Microsoft Cybersecurity Architect, AWS Security or similar certifications.