SECURITY ARCHITECT

KBR; Hatfield; On-site; GBP 50,000 - 85,000; Full time

Job summary

KBR is seeking a Security Architect to design and implement security solutions for hybrid cloud systems at the Sellafield nuclear site. The role entails assessing vulnerabilities, ensuring compliance, and integrating security architecture into various platforms. Candidates must possess relevant qualifications and demonstrated experience in cybersecurity. This is a key role in supporting critical infrastructure projects that secure future generations.

Qualifications

• Proven expertise in security architecture for hybrid cloud environments.
• Experience integrating hybrid cloud platforms with security architecture.
• Knowledge of ISO 27001/27002, COBIT, ITIL frameworks.

Responsibilities

• Design security solutions for hybrid cloud tools and systems.
• Conduct penetration testing and security assessments.
• Ensure compliance with security policies and standards.

Skills

Communication

Leadership

Cyber Security Standards

Network Security

Data Classification

Education

Bachelor’s Degree in Computer Science or equivalent

MS Azure certifications

Cisco accreditations

Membership of a professional body in Information Security

Tools

MS SQL Server

Oracle RDBMS

Windows OS

SIEM, SOC, and IDAM tools

Job description

Social network you want to login/join with:

About the Programme and Project Partners (PPP) Model

The PPP model was initiated in 2019 to transform major project delivery at the Sellafield nuclear site. It brings together KBR, Jacobs, Morgan Sindall Infrastructure, Altrad Babcock, and Sellafield Ltd to deliver a 20-year pipeline of infrastructure projects supporting decommissioning and creating a safe environment for future generations.

PPP creates opportunities for its people, supply chain, economy, and communities through its projects. KBR’s nuclear team is working on leading-edge UK nuclear projects, including new-build, defence, and decommissioning programs.

KBR was named a “Great Place to Work-Certified” company in 2023, reflecting its commitment to being a preferred UK employer for meaningful work.

Security Architect

Reports to: Head of IT / ITSO

Location: Warrington / Cumbria, 2-3 days on-site weekly, with occasional travel to the opposite site.

Qualifications, Experience, and Skills

Qualifications:

• Bachelor’s Degree in Computer Science or equivalent with proven expertise
• MS Azure certifications and professional qualifications
• Cisco accreditations
• Membership of a professional body in Information Security
• Experience with Cyber Security Standards

Experience and Skills:

• Experience in security architecture for hybrid cloud environments using MS Azure and Wintel platforms
• Security assurance for SIEM, SOC, and IDAM in regulated, secure environments
• Excellent communication and leadership skills
• Knowledge of security measures like firewalls, intrusion detection/prevention, network controls, segmentation
• Proficiency with Windows OS
• Understanding of network security architecture and development
• Wireless security, routers, switches, VLANs
• DNS security principles, VPN, proxy services
• Knowledge of ISO 27001/27002, COBIT, ITIL frameworks
• Experience in integrating hybrid cloud platforms into SIEM, SOC, and IDAM, including MS Sentinel
• Third-party auditing and cloud risk assessment skills
• Knowledge of MS SQL Server, Oracle RDBMS, VDI/Thin client services
• Data classification, PKI, secure third-party systems
• Integration of SaaS with Azure IaaS/PaaS and security architecture

Core Responsibilities

The Security Architect designs security solutions for hybrid cloud tools and systems, planning, implementing, and reviewing security activities to support deployment.

Key tasks include:

• Identifying system vulnerabilities
• Supporting security architecture planning and build
• Conducting penetration testing and security assessments
• Researching security standards and authentication protocols
• Ensuring compliance with security policies and standards
• Testing and validating system integrations
• Supporting SIEM, SOC, and IDAM integration
• Developing response plans for security incidents