Security Architect

NexGen Associates; Corsham; On-site; GBP 90,000 - 120,000; Full time

Job summary

NexGen Associates is recruiting an experienced Security Architect to join a growing consultancy delivering complex and strategically important technology programmes across the UK Defence sector, including MOD contexts.

This senior role requires expertise in security architecture, risk assessment, and secure-by-design approaches, with responsibility for leading security across programmes and aligning with MOD policies and industry standards.

Qualifications

• Active SC clearance minimum, DV willingness.
• Experience delivering security architectures for defence programmes.
• Ability to communicate complex security concepts to stakeholders.

Responsibilities

• Develop and maintain security architectures for MOD technology programmes.
• Translate requirements into secure solution designs with compliance to MOD standards.
• Provide security guidance across the full lifecycle of projects.
• Support accreditation and security approval activities.
• Review designs to identify vulnerabilities and ensure non-compliance mitigation.
• Engage with MOD stakeholders and defence partners.
• Assist bid activity and development of security-related solutions.

Skills

Security architecture

MOD/defence experience

Security risk assessments

Cloud security

Stakeholder management

Security documentation

Job description

Security Clearance: Active SC Clearance is required as a minimum and you must be eligible and willing to go through DV Clearance

NexGen Associates is recruiting an experienced Security Architect to join a growing consultancy delivering complex and strategically important technology programmes across the UK Ministry of Defence.

This is a senior position for someone with strong security architecture experience gained within MOD or defence environments. The successful candidate will provide security leadership across complex programmes, ensuring that solutions are secure, compliant and aligned with MOD policies and recognised industry standards.

The role will involve working closely with technical teams, programme leaders, security specialists and senior MOD stakeholders to identify security risks and develop appropriate architectural solutions.

Key Responsibilities:

• Develop and maintain security architectures for complex MOD technology programmes.
• Translate business, operational and technical requirements into secure solution designs.
• Provide security advice throughout the full project and systems-development lifecycle.
• Ensure solutions comply with MOD security policies, standards and assurance requirements.
• Produce and review security architecture documentation, patterns and design artefacts.
• Conduct security risk assessments and identify appropriate technical and procedural controls.
• Support accreditation, assurance and security approval activities.
• Review solution designs and identify potential vulnerabilities, risks and areas of non-compliance.
• Work collaboratively with enterprise architects, solution architects, engineers and cyber security teams.
• Provide clear security guidance to technical and non-technical stakeholders.
• Engage confidently with senior MOD, military, government and industry stakeholders.
• Support bid activity, client proposals and the development of security-related solutions where required.
• Proven experience working as a Security Architect, Cyber Security Architect or in a comparable senior security role.
• Previous experience delivering projects or programmes within the Ministry of Defence.
• Strong understanding of security architecture principles and secure-by-design approaches.
• Experience developing security architectures for complex technology environments.
• Knowledge of MOD security policies, assurance processes and risk-management frameworks.
• Experience assessing technical designs and recommending proportionate security controls.
• Strong understanding of cloud, infrastructure, networking, identity and access management, data protection and cyber security.
• Ability to produce clear and detailed security documentation.
• Excellent stakeholder-management and communication skills.
• Ability to explain complex security risks and technical concepts to senior and non-technical audiences.
• Experience working within defence consultancy or client-facing delivery environments.
• Knowledge of MOD Architecture Framework principles or comparable architectural frameworks.
• Familiarity with NIST, ISO 27001, Cyber Essentials Plus and relevant UK Government security guidance.
• Experience supporting security accreditation or assurance activities.
• Knowledge of Microsoft Azure, AWS or other secure cloud environments.
• Experience working on classified or mission-critical systems.
• Relevant professional certifications such as CISSP, CISM, SABSA, TOGAF or equivalent.
• Eligibility and willingness to undertake DV Clearance if required.