Security Architect Consultant

NTT DATA, Inc.; Birmingham; Hybrid; GBP 90,000 - 150,000; Full time

Job summary

NTT DATA, Inc. is seeking a Security Architect to design and deliver secure, scalable, and compliant architectures, with a focus on Google Cloud Platform and emerging agentic AI systems.

You will translate business needs into cloud security patterns and governance controls. You'll lead security architecture across GCP, IAM, VPC Service Controls, Cloud Armor, and AI security, mentoring teams, engaging stakeholders, and guiding pre‑sales delivery with a strong focus on ISO 27001, NIST, and

Qualifications

• 5+ year(s) in information security, cloud security and architecture roles.
• Strong knowledge of governance, risk and compliance frameworks (ISO 27001, NIST CSF/800-53, NIS2, DORA).
• Excellent communication with senior stakeholders.

Responsibilities

• Translate business, data protection and security requirements into architectural designs.
• Design cloud‑native security architectures with GCP focus.
• Establish secure patterns across cloud platforms, focusing on GCP IAM, VPC Service Controls, Cloud Armor, and secure workload design.
• Develop security design documentation and diagrams aligned with compliance requirements.
• Apply risk and threat‑based approaches to secure solutions.

Skills

Security governance

Cloud security

Stakeholder comms

Mentoring teams

Governance frameworks

Tools

GCP security services

IAM

VPC Service Controls

Job description

Permanent hybrid variable Birmingham or London

What You’ll Be Doing

As a Security Architect, you will play a key role in designing and delivering secure, scalable, and compliant architectures for our clients, with a particular focus on Google Cloud Platform (GCP) and emerging Agentic AI systems. Leveraging your strong cloud security and governance expertise, you will:

Security Architecture

• Translate business, data protection and security requirements into practical architectural designs leveraging industry frameworks (NIST, ISO 27001, CIS).


• Design and maintain cloud‑native security architectures, with deep expertise in GCP architecture, security services, and secure workload design.


• Establish secure architectural patterns and standards across cloud platforms, with specific focus on GCP IAM, VPC Service Controls, Cloud Armor, Confidential Computing, and secure workload segmentation.


• Develop security design documentation, diagrams, and rationale aligned with business and compliance requirements.


• Apply risk‑based and threat‑based approaches to recommend secure and proportionate solutions.

Agentic AI & LLM Security Architecture

You will be responsible for shaping security controls around emerging AI ecosystems, including:

• Designing security architectures for agent‑based AI systems, including orchestration frameworks, tool‑use agents, and multi‑agent workflows.


• Implementing AI/LLM security controls across:


• API & orchestration security, including secure agent tool use


• Data security for vector stores, embeddings, and retrieval services


• Performing AI‑specific threat modelling, including:


• Sensitive data leakage


• Toxic output & jailbreak attempts


• Advising on secure integration of AI with cloud environments, focusing on compliant, privacy‑aware design.


• Conduct comprehensive risk assessments and threat modelling for cloud and AI systems.


• Support incident response, including issues involving AI‑driven systems and automated agents.


• Provide actionable mitigation strategies for cloud and AI threats.

Stakeholder Engagement & Technical Leadership

• Provide expert guidance to clients, presenting complex cloud and AI security concepts to technical and non‑technical partners.


• Mentor teams on secure cloud design, AI security, and modern architecture practices.


• Participate in pre‑sales and contribute to delivery collateral.

Security Policy, Standards & Governance

• Develop and implement cloud and AI security policies and standards.


• Support compliance assessments and audits, including cloud‑specific controls and emerging AI regulatory frameworks.


• Ensure alignment to governance standards such as ISO 27001, NIST 800‑53/CSF, NIS2, DORA, and industry cloud security benchmarks.

Technology Evaluation & Continuous Improvement

• Conduct cloud and AI security architecture reviews, including:


• GCP security posture assessments


• Evaluate and recommend security technologies for cloud, AI, identity, and data protection.


• Stay up to date with new threats, especially in LLM, agentic AI, and GCP contexts.

What Experience You’ll Bring

Required Core Profile

• Security‑first mindset — this role is primarily for a Security Architect, not a general cloud architect.


• 5+ year’s experience in information security, cloud security and architecture roles.


• Strong knowledge of security governance, risk and compliance frameworks (ISO 27001, NIST CSF/800‑53, NIS2, DORA).


• Strong communication skills and ability to work with senior stakeholders.


• Experience mentoring teams or influencing security decisions.

Required Technical Skills

• Deep hands‑on experience with GCP security services and GCP security best practices.


• Experience architecting secure multi‑project setups and identity boundaries.

Agentic AI Security

• Experience designing security for agent‑based AI systems and LLM‑integrated applications.


• Hands‑on experience with AI/LLM security controls (prompt security, model governance, secure APIs, orchestration security).


• AI‑specific threat modelling expertise.

Cloud & Security Architecture

• Strong cloud security background across AWS/Azure/GCP.


• Experience in secure design of:


• IAM


• Data protection and encryption


• Application and API security


• Knowledge of SIEM, IAM, CASB, container/Kubernetes security.


• Experience in Vibe coding, as well as technologies experience similar to Openclaw and Ollama

Certifications

• One or more of: CISA, CRISC, CISM, CISSP (required).