Security Architect

Sanderson Government & Defence; Reading; Hybrid; GBP 60,000 - 90,000; Full time

Job summary

Sanderson Government & Defence is seeking an experienced Security Architect to support secure digital transformation programmes within government and defence sectors. The role covers cloud, infrastructure, application and enterprise security, ensuring security is embedded throughout the solution lifecycle and supporting assurance, accreditation and compliance.

The ideal candidate will have MOD or government context, with strong governance, risk management and architecture practices.

Qualifications

• Active SC Clearance.
• Experience as a Security Architect in Defence, Government or highly regulated environments.
• Experience applying MOD security policies JSP 400, JSP 441 and JSP 453.
• Experience producing security artefacts to support assurance, accreditation and compliance.
• Strong understanding of security architecture frameworks and methodologies.
• Experience threat modelling, risk assessments and security assurance activities.
• Knowledge of ISO 27001/27002, NIST RMF and NIST 800-53.
• Experience designing secure cloud, infrastructure and network solutions.
• Strong stakeholder engagement, communication and documentation skills.

Responsibilities

• Design and assure secure architectures across cloud, infrastructure, networks, applications and data platforms.
• Lead security architecture reviews and provide guidance throughout project lifecycles.
• Apply Secure by Design principles to government and defence programmes.
• Promote Zero Trust, Defence-in-Depth and Least Privilege principles.
• Develop architecture patterns, standards and security roadmaps.

Skills

SC Clearance

Security Architecture

JSP 400

JSP 441

JSP 453

Threat Modelling

ISO 27001

NIST RMF

NIST 800-53

Cloud Security

Azure/AWS

Stakeholder Engagement

Architecture Review

Security Assurance

Job description

Location: Reading, UK (Hybrid Working)
Working Pattern: 2 Days Per Week Onsite
Contract Type: Inside IR35
Duration: 6 Months rolling contract
Security Clearance: Active SC Clearance Required

The Opportunity

Seeking an experienced Security Architect to support the delivery of high-profile digital transformation and cyber security programmes within government and defence environments. Working across cloud, infrastructure, application and enterprise security domains, you will be responsible for ensuring security is embedded throughout the solution lifecycle while supporting assurance, accreditation and compliance activities.

This role is ideally suited to a security professional with experience operating within MOD or wider Government environments, with a strong understanding of security governance, risk management and architecture best practices.

Key Responsibilities

Security Architecture & Design

• Design and assure secure architectures across cloud, infrastructure, networks, applications and data platforms.
• Lead security architecture reviews and provide expert guidance throughout project lifecycles.
• Apply Secure by Design principles to complex government and defence programmes.
• Promote Zero Trust, Defence-in-Depth and Least Privilege security principles.
• Develop architecture patterns, standards and security roadmaps.

Risk Management & Security Assurance

• Lead security risk identification, assessment, treatment and acceptance activities.
• Conduct threat modelling, security assessments and architectural risk reviews.
• Apply recognised frameworks including ISO 27001, NIST RMF and NIST 800-53.
• Support security accreditation, governance and assurance processes.
• Provide recommendations to reduce risk while enabling business and operational objectives.

MOD Policy & Compliance Assurance

• Support compliance with key MOD security policies and standards, including JSP 400, JSP 441 and JSP 453.
• Develop, maintain and review security artefacts to support assurance, accreditation and governance activities across the application portfolio.
• Ensure security documentation aligns with MOD, organisational and regulatory requirements.
• Support security audits, assurance reviews and compliance assessments.
• Work closely with project teams and stakeholders to ensure security controls are implemented, documented and maintained throughout the system lifecycle.
• Contribute to governance forums, accreditation activities and risk management processes supporting secure service delivery.

Cloud & Cyber Security

• Assess and assure cloud-based services and platforms.
• Support the implementation of security controls across Azure, AWS and hybrid-cloud environments.
• Review solutions against NCSC guidance and industry best practice.
• Collaborate with engineering teams to embed security requirements from design through deployment.
• Support cyber resilience, monitoring and incident response initiatives.

Stakeholder Engagement

• Act as a trusted security advisor to programme teams and senior stakeholders.
• Present security risks, recommendations and architectural decisions to both technical and non-technical audiences.
• Facilitate workshops, design reviews and assurance activities.
• Build strong relationships across client, supplier and delivery teams.

Essential Skills & Experience

• Active SC Clearance.
• Proven experience working as a Security Architect within Defence, Government, National Security or other highly regulated environments.
• Experience applying MOD security policies and standards, including JSP 400, JSP 441 and JSP 453.
• Experience producing and maintaining security artefacts to support assurance, accreditation and compliance activities.
• Strong understanding of security architecture frameworks and methodologies.
• Experience conducting threat modelling, risk assessments and security assurance activities.
• Working knowledge of ISO 27001, ISO 27002, NIST RMF and NIST 800-53 frameworks.
• Experience designing secure cloud, infrastructure and network solutions.
• Strong stakeholder engagement, communication and documentation skills.
• Ability to translate security requirements into practical and scalable technical solutions.

Desirable Experience

• Knowledge of Def Stan 05-138 and Defence Cyber Certification requirements.
• Experience supporting cloud security assurance programmes.
• CISSP, CISM, SABSA, TOGAF or equivalent certifications.
• Experience working within MOD Digital, Defence Digital, DE&S or wider Government security programmes.
• Knowledge of NCSC Cloud Security Principles and UK Government security standards.

Reasonable Adjustments:

Respect and equality are core values to us. We are proud of the diverse and inclusive community we have built, and we welcome applications from people of all backgrounds and perspectives. Our success is driven by our people, united by the spirit of partnership to deliver the best resourcing solutions for our clients.