Security Architect

Onyx-Conseil; City of Westminster; Hybrid; GBP 80,000 - 110,000; Full time

Job summary

LA International is seeking an experienced Security Architect to support a major transformation programme involving a large-scale legacy COBOL application. You will design and define security architecture for the programme, maintain security documentation and develop reusable security architecture patterns.

You will collaborate with architecture, engineering and security teams to embed security controls early in the development lifecycle and ensure alignment with enterprise security standards

Qualifications

• Experience in security architecture within complex enterprise environments.
• Ability to review high-level solution and architecture designs.
• Experience embedding security controls throughout the development lifecycle.
• Ability to develop security architecture patterns and standards.
• Experience with security risk assessment and identifying architectural gaps.
• Proven ability to document residual risks and remediation approaches.
• Proven track record producing and maintaining security architecture documentation.
• Ability to collaborate with security, architecture and engineering stakeholders.

Responsibilities

• Create and design security architecture for the programme.
• Develop and maintain security architecture documentation.
• Define and develop reusable security architecture patterns.
• Review high-level architecture designs to ensure appropriate security controls are embedded early in the development lifecycle.
• Work with Security teams to define enterprise security patterns.
• Ensure high-level solution architecture designs align with relevant security standards and architectural principles.
• Identify security and architectural gaps through risk assessment.
• Document residual security risks and provide clear remediation paths.
• Work collaboratively with architects, engineers and wider programme stakeholders throughout the design and build phases.
• Provide security architecture input across simultaneous high-level and low-level design activities.

Skills

Security architecture

Enterprise architecture

Security risk assessment

Documentation

Job description

Job title: Security Architect Location: Hybrid - London or Manchester Contract Length: 12 months Sector: Public Sector

The Role

We are looking for an experienced Security Architect to support a major transformation programme involving a large-scale legacy application.

The Security Architect will be responsible for designing and defining security architecture for the programme, maintaining security documentation, and developing reusable security architecture patterns.

You will work closely with architecture, engineering and security teams to ensure appropriate security controls are embedded into designs at an early stage of the development lifecycle.

Key Responsibilities

• Create and design security architecture for the programme.
• Develop and maintain security architecture documentation.
• Define and develop reusable security architecture patterns.
• Review high-level architecture designs to ensure appropriate security controls are embedded early in the development lifecycle.
• Work with Security teams to define enterprise security patterns.
• Ensure high-level solution architecture designs align with relevant security standards and architectural principles.
• Identify security and architectural gaps through risk assessment.
• Document residual security risks and provide clear remediation paths.
• Work collaboratively with architects, engineers and wider programme stakeholders throughout the design and build phases.
• Provide security architecture input across simultaneous high-level and low-level design activities.

Programme Background

The programme is focused on the transformation of a significant legacy application containing an extensive COBOL codebase.

Business processes within the existing COBOL codebase are inadequately documented, creating challenges in supporting the system, debugging issues, training support teams and accommodating new requirements.

Following an initial feasibility exercise, a refactoring approach was proposed. The programme subsequently moved into a design and analysis phase to analyse the existing COBOL code, create a high-level design and scope the first wave of the delivery plan.

The programme is now in the build phase, with the first wave of build activity completed, while high- and low-level design continues across the remaining features.

Key Experience

• Security architecture within complex enterprise environments.
• Reviewing high-level solution and architecture designs.
• Embedding security controls throughout the development lifecycle.
• Developing security architecture patterns and standards.
• Security risk assessment and identification of architectural gaps.
• Documenting residual risks and defining remediation approaches.
• Producing and maintaining security architecture documentation.
• Working effectively with security, architecture and engineering stakeholders.
• Supporting complex transformation, modernisation or legacy-system programmes.

Experience working with legacy applications, COBOL environments or large-scale application refactoring programmes would be advantageous.

LA International is an award-winning partner of choice for many of the world's most influential companies and government organisations. Holding Enhanced Government Security Accreditation, we are recognised as the European market leader in the delivery of Security Cleared talent to organisations that demand the very highest levels of security, compliance and assurance. A multiple award-winning organisation, having secured the prestigious Queens Award for Enterprise: International Trade over consecutive years. We are committed to fostering an inclusive, equitable and accessible workplace where everyone feels valued and supported. We welcome applications from all individuals, regardless of background or identity, and we encourage candidates who may not meet every listed requirement to still apply. If you require any adjustments or support during the recruitment process, please let us know and we will work with you to ensure a fair and accessible experience.

Please Note: If a high volume of applications is received, only candidates shortlisted will be contacted.