Security Architect

Avance Consulting; Swindon; On-site; GBP 70,000 - 100,000; Full time

Job summary

A leading security consultancy in the UK is seeking a Security Architect who will ensure robust security across hybrid and multi-cloud environments. The ideal candidate will have proven experience in regulated industries, expertise in IBM DataPower for API security, and a strong grasp of zero-trust principles. Key responsibilities include developing security architecture, conducting risk assessments, and integrating security measures with cross-functional teams.

Qualifications

• Proven experience as a Security Architect in a large organization, preferably in a regulated enterprise.
• Hands-on experience with DataPower for API security.
• Familiar with OAuth 2.0, JWT, and encryption standards.

Responsibilities

• Develop and maintain security architecture for service mesh deployments.
• Conduct risk assessments to identify potential threats.
• Design secure API gateways using IBM DataPower.

Skills

Security Architect experience

IBM DataPower

Zero-trust security models

Cryptography knowledge

CI/CD automation tools

Interpersonal skills

Education

CISM / CISSP or equivalent certification

Tools

Terraform

Ansible

Git

Jenkins

Job description

Role description:

As a Security Architect focusing on Realtime Platforms team, your primary responsibility will be to ensure robust security controls across hybrid and multi-cloud environments, aligning with regulatory and compliance requirements. This role requires deep expertise in service mesh technologies and IBM DataPower for API security and integration.

Key responsibilities:

• Develop and maintain security architecture for service mesh deployments across Kubernetes and containerized environments.
• Conduct thorough risk assessments to identify potential security threats and develop mitigation strategies.
• Create comprehensive threat models aligning with MITRE ATTACK & STRIDE frameworks.
• Recommend the best controls & mitigations to potential vulnerabilities
• Design/Review secure API gateways and integration patterns using IBM DataPower appliances.
• Define and enforce security policies, standards, and best practices for microservices, APIs, and data flows, ensuring Ensure compliance with financial regulations (e.g., PCI DSS, ISO 27001, GDPR).
• Implement mTLS, RBAC, and zero-trust principles within service mesh frameworks.
• Configure and manage DataPower for API security, encryption, authentication (OAuth 2.0, JWT, WS-Security), and traffic mediation.
• Collaborate with cross-functional teams to integrate security measures seamlessly with downstream systems
• Communicate security risks and strategies effectively to stakeholders, including executive leadership and IT teams.

Key skills/knowledge/experience:

• Proven experience as a Security Architect working in a large, complex organization. Ideally, this experience would be within a financially regulated enterprise (e.g., PCI compliance).
• Hands-on experience with IBM DataPower for API security, integration, and policy enforcement.
• Familiarity with OAuth 2.0, JWT, TLS, WS-Security, and encryption standards.
• Previous relevant experience in developing bespoke Threat Models leveraging frameworks like MITRE ATTACK & STRIDE
• Proven ability to design secure architectures for hybrid/multi-cloud environments
• Experience with zero-trust security models and microservices security.
• Be able to understand and assess the security elements of technical designs / solutions and have a proven ability to constructively challenge to deliver better business and security outcomes.
• Good knowledge of cryptography
• Previous experience of working in UK Financial Services or similar highly regulated industry.
• Have a relevant professional qualification (or be working towards certification), such as CISM / CISSP.
• Familiarity with M&A processes and the unique security challenges they present.
• Proficiency in CI/CD automation tools (Terraform, Ansible, Git, Jenkins).
• Knowledge / experience of PCI-DSS, including PCI-P qualification.
• Knowledge / experience of Data privacy and GDPR;
• Experience with regulatory compliance frameworks specific to financial organizations.
• Excellent interpersonal and communication skills.