Security Architect

Synergize Consulting Ltd; Salisbury; Hybrid; GBP 102,000 - 114,000; Full time

Job summary

Synergize Consulting Ltd is seeking a DV-cleared Security Architect to design, build and assure back-end platform and endpoint security, including air-gapped environments. The role operates across architectural and hands-on levels, coordinating with Infrastructure, Platform and Security teams to meet UK Government security requirements.

The candidate will apply NIST CSF and MOD policies, deliver vulnerability management, and produce formal security documentation.

Qualifications

• Proven experience as Security Architect or senior Security SME in high-assurance environments.
• Designing and delivering platform security controls, AV/EDR and vulnerability management.
• Experience working in offline/air-gapped environments with secure update models.
• Ability to produce formal technical documentation (HLDs/LLDs/SOPs).
• Experience supporting security accreditation and compliance processes.

Responsibilities

• Lead architecture and implementation of endpoint and platform security solutions.
• Design security controls aligned with MOD policies, NIST CSF and NCSC guidance.
• Develop vulnerability management capabilities: scanning, risk prioritisation, remediation and reporting.
• Develop security for offline/air-gapped environments, including controlled updates.
• Establish secure data transfer and threat intelligence ingestion in disconnected environments.
• Define vulnerability scanning regimes and remediation processes.
• Advise on endpoint hardening, firewall rules, ports, protocols and system security controls.
• Produce and maintain security documentation (HLDs, LLDs, SOPs).
• Support security accreditation, assurance and compliance processes.

Skills

Security architecture

Endpoint protection

Vulnerability management

Air-gapped environments

MOD/NIST policy compliance

Penetration testing awareness

Documentation (HLD/LLD/SOPs)

Security accreditation support

Threat intelligence ingestion

Job description

Contract Security Architect (Platform security)

£555 p/d Inside IR35

Hybrid remote in Salisbury

*DV Clearance is essential* please only apply if you hold this level of clearance, this is due to the classification of the project.

We are seeking an experienced DV cleared Security Architect support the design, build and assurance of Back End platform and endpoint security capabilities within secure, offline (air-gapped) environments.

This is a highly technical role suited to a security professional who can operate at both architectural and hands-on levels, with strong experience across endpoint protection, Antivirus/EDR, vulnerability management, platform security and secure environments. You will work closely with Infrastructure, Platform and Security teams, applying NIST Cybersecurity Framework principles and MOD security policies to deliver secure and compliant capabilities for a UK Government environment.

Key Responsibilities

• Lead the architecture, design and implementation of endpoint and platform security solutions.
• Design security controls aligned with MOD policies, NIST Cybersecurity Framework and NCSC guidance.
• Design and deliver vulnerability management capabilities, including scanning, risk prioritisation, remediation and reporting.
• Develop security solutions for offline and air-gapped environments, including controlled update, patch and signature distribution.
• Establish secure mechanisms for threat intelligence ingestion and data transfer within disconnected environments.
• Define and implement vulnerability scanning regimes and remediation processes.
• Advise on endpoint hardening, Firewall rules, ports, protocols and system security controls.
• Produce penetration testing scopes covering Back End platforms and endpoints.
• Produce and maintain formal technical documentation, including HLDs, LLDs, security architecture documentation and SOPs.

Essential Skills & Experience

• Proven experience operating as a Security Architect, Security Engineer or senior Security SME within secure, regulated or high-assurance environments.
• Designing and delivering: Platform security controls, Firewall, port and protocol security, Antivirus/Endpoint Protection/EDR solutions, Vulnerability Management platforms and Endpoint hardening and security controls
• Experience working within offline/air-gapped environments.
• Strong understanding of: Secure patching and update models, AV signature management, Threat intelligence management, Controlled data transfer mechanisms and Vulnerability assessment and remediation
• Experience producing formal technical documentation, including High-Level Designs (HLDs), Low-Level Designs (LLDs), Security Architecture documentation and Standard Operating Procedures (SOPs)
• Experience supporting security accreditation, assurance and compliance processes.