Security Architect

Version 1; Greater London; Hybrid; GBP 49,000 - 66,000; Full time

Benefits offered by this job

Flexible/remote working

Private healthcare

Life assurance

Career progression and mentorship

Quarterly profit share

Certifications and accreditations

Wellbeing schemes

Generous holiday allowance

Job summary

Version 1 in Greater London seeks an experienced security architect to design enterprise-grade security architectures across cloud platforms and regulated environments.

You will translate risk into practical controls, lead threat modelling, and guide delivery teams on secure-by-design practices while engaging with senior stakeholders.

Qualifications

• Experience designing security architectures for enterprise programmes.
• Strong knowledge of cloud security across AWS/Azure.
• Experience with threat modelling and risk assessment.
• Ability to communicate security concepts to non-technical stakeholders.
• Familiarity with GOV.UK/GDS standards and NCSC guidance is a plus.

Responsibilities

• Design security solutions for complex digital risks across government, financial services, and private sector clients.
• Translate threat landscapes and compliance into practical architectures.
• Lead threat modelling and security options analysis through delivery sessions.
• Present recommendations to architecture review boards and stakeholders.
• Guide development teams on secure-by-design decisions.

Skills

Security architecture design

AWS/Azure security

Threat modelling

Communication to leadership

Tools

IAM

Encryption

Secrets management

Cloud security

Job description

Salary: £49,000 - 66,000 per year

Requirements

• We have designed and validated security architectures for enterprise-scale programmes across cloud platforms, application security, identity and access management, and system integration.
• We have delivered successful security outcomes and taken clear ownership of the security design decisions behind them.
• We have experience securing workloads on AWS and/or Azure, including network segmentation, IAM, encryption, secrets management, and security monitoring.
• We understand AppSec practices including secure SDLC, SAST/DAST tooling, API security, and container security in agile delivery contexts.
• We have worked directly with clients and senior stakeholders to assess risk, facilitate threat modelling, and build consensus around security approaches.
• We communicate clearly with both technical teams and non-technical leadership.
• Highly desirable: experience working within GOV.UK digital standards, GDS service assessments, NCSC guidance, and UK government security classifications.
• Highly desirable: familiarity with DSP Toolkit or equivalent assurance frameworks.
• Highly desirable: experience designing controls for regulated financial environments, including FCA/PRA expectations, PCI-DSS, and secure integration patterns for core banking or payment systems.
• Highly desirable: working knowledge of NIST CSF, ISO 27001, CIS Controls, or SABSA.
• Highly desirable: holding or working towards CISSP, CISM, CCSP, or equivalent.
• Highly desirable: experience assessing and mitigating risks in AI/ML solution architectures, including data exposure, prompt injection, model supply chain, and output integrity.

Responsibilities

• We partner with government, financial services, and private sector clients to design security solutions for complex digital risks.
• We translate threat landscapes, compliance obligations, and business constraints into practical security architectures.
• We work across the full engagement lifecycle from threat modelling and security options analysis through to facilitating design sessions with delivery teams.
• We present recommendations to architecture review boards and senior stakeholders.
• We define security approaches such as zero-trust for government departments and security controls for cloud migrations.
• We guide development teams through secure-by-design decisions.
• We embed security thinking early in delivery and keep it there.
• We guide and upskill delivery teams on secure-by-design practices.
• We help engineers and product managers build security literacy without slowing down delivery.

Technologies

• AI
• API
• AWS
• Azure
• Cloud
• IAM
• Support
• Network
• Oracle
• OutSystems
• Security
• Snowflake
• Architect
• Embedded

More

Version 1 has celebrated 30 years in business and we continue to be trusted by global brands to deliver technology and transformation solutions that drive customer success. Our deep expertise helps customers navigate the rapidly evolving technology landscape, and we partner with global technology leaders including Microsoft, AWS, Oracle, Red Hat, OutSystems, and Snowflake to provide high-quality solutions and services. We are an award-winning employer and our employees are at the very heart of what we do. We are the UK and Irelands premier AWS, Microsoft and Oracle partner, a 3300+ strong business with 350/300m revenue, and we have been a Great Place to Work in Ireland and the UK for more than 10 years. We are also recognised as a Best Workplace for Women and for Wellbeing.

Benefits

• quarterly performance-related profit share
• career progression and mentorship
• flexible/remote working
• financial wellbeing support
• private healthcare
• life assurance
• wellbeing schemes
• generous holiday allowance
• enhanced leave policies
• educational assistance
• certifications and accreditations
• reward schemes
• community-focused initiatives

Equal opportunities

We are committed to being an equal opportunities employer and to building a diverse, inclusive and respectful workplace where everyone feels valued and able to thrive.

last updated 36 week of 2026