Security Architect

Kingdom People; Birmingham; On-site; GBP 80,000 - 110,000; Full time

Job summary

Kingdom People is seeking an experienced Security Architect to provide critical security architecture expertise across a diverse portfolio of customer engagements. You will champion secure-by-design principles, proactive risk management, and information assurance throughout the solution lifecycle.

You will translate complex customer security requirements into coherent, secure architectures and control strategies, spanning cloud, networks, data platforms, and high-assurance environments.

Qualifications

• Proven background in security architecture and cyber security.
• Experience creating security controls for high-assurance systems.
• Ability to translate threats into technical requirements and design documents.

Responsibilities

• Embed secure-by-design principles and Zero Trust across complex systems.
• Maintain security design quality, controls, and technical assurance proportionate to risk.
• Collaborate with Solution Architects, Technical Architects, Cyber Consultants, Engineers and product teams.
• Oversee network, data security, cryptography, and security monitoring/detection strategies.
• Support bid teams and pre-sales with expert security insights.
• Drive technology development to stay ahead of cyber threats.

Skills

Security architecture

Cyber security

Systems engineering

Stakeholder communication

Education

Degree or equivalent

Job description

About the Role

We are seeking an experienced Security Architect to provide critical security architecture expertise across our diverse portfolio of customer engagements. In this role, you will ensure that secure-by-design principles, proactive cyber risk management, and rigorous information assurance remain integral throughout the entire solution lifecycle.

You will act as the vital bridge translating complex customer security requirements, threat intelligence, business goals, and technical constraints into coherent, highly secure architectures and control strategies. Your operating environment will span secure information exchange, cross-domain solutions, cloud services, networks, applications, data platforms, and high-assurance environments. You must have current SC clearance or recently lapsed SC Clearance.

Key Responsibilities

• Security Architecture & Design: Embed secure-by-design principles, Zero Trust frameworks, and Identity & Access Management (IAM) across complex systems.
• Technical Assurance & Quality: Maintain overall responsibility for security design quality, technical assurance, and the proportionate application of security controls.
• Cross-Functional Collaboration: Partner closely with Solution Architects, Technical Architects, Cyber Consultants, Engineers, Product Teams, and customer security stakeholders.
• Domain Protections: Oversee and implement robust strategies for network and platform security, data security, cryptography, and security monitoring/detection.
• Growth & Pre-Sales Support: Proactively support bid teams and pre-sales engineering with expert security insight.
• Innovation: Drive technology development to keep our solutions ahead of emerging cyber threats.

Experience & Technical Skills

Professional Experience

• Proven background in security architecture, cyber security, systems engineering, or a closely related technical discipline.
• Experience designing robust security controls within highly complex, high-assurance technical systems.
• Demonstrated ability to collaborate across multidisciplinary architecture and engineering teams.
• Strong track record of producing clear, comprehensive security architecture and design documentation.
• Proven success translating complex cyber risks into clear, actionable technical requirements.
• Experience evaluating solution designs to identify security weaknesses and control gaps.
• Exceptional communication skills with the ability to confidently engage both technical and non-technical stakeholders.

Technical Proficiencies & Frameworks

• Core Architectures: Secure-by-Design (SbD), Zero Trust, IAM.
• Network & Data Security: Firewalls, VPNs, PAM, Encryption, Key Management, and Secure Information Exchange protocols.
• Frameworks & Standards: Practical knowledge of NCSC guidelines, ISO 27001, Cyber Essentials, MoD 05-138, and NIST.

Qualifications

• A Degree, degree apprenticeship, or equivalent professional experience in a relevant technical discipline.
• Possession of, or active progress towards, recognized industry certifications such as CISSP, SABSA, NCSC Certified, TOGAF, CCSP, or ISO 27001 Lead Implementer/Auditor