Security Architect - SC Cleared

Sanderson Government & Defence; Greater London; Hybrid; GBP 101,000 - 109,000; Full time

Job summary

Sanderson Government & Defence is seeking an experienced Security Architect to join a specialist consultancy delivering critical government projects and digital transformations. You will lead secure cloud design, provide architectural assurance, and promote security-by-design across large programmes.

You will work with Engineering, DevOps and Delivery teams to shape cloud security, manage risk, and strengthen security postures in highly regulated environments, including government services and

Qualifications

• Proven experience as a Security Architect, Cloud Security Architect, or Enterprise Security Architect.
• Expertise in: Cloud Security Planning, Cloud Security Architecture, Cloud Infrastructure Security, Cloud Security Assessment, Managed Cloud Security Services.
• Strong understanding of secure cloud design principles and architecture methodologies.
• Experience securing large-scale cloud environments.
• Strong knowledge of cloud-native security controls and services.
• Experience with threat modelling, risk assessments, and security architecture reviews.
• Ability to translate business requirements into secure technical solutions.
• Experience working within highly regulated environments.
• Strong stakeholder management and communication skills.
• Active SC Clearance.

Responsibilities

• Define and maintain cloud security architecture, standards, and security frameworks across multiple projects.
• Design secure cloud solutions that meet business, operational, security, and compliance requirements.
• Ensure architectures align with recognised security standards, industry frameworks, and architectural best practices.
• Establish security patterns, principles, and reusable standards for adoption across delivery teams.
• Lead the development and continuous improvement of cloud security strategies and roadmaps.
• Ensure security requirements are embedded within technology and business initiatives from inception.
• Support governance activities through architectural assurance and security guidance.
• Conduct design reviews and provide recommendations relating to security risks and control effectiveness.
• Define, document, and oversee the implementation of cloud security controls.
• Identify security risks within cloud environments and recommend mitigation strategies.
• Conduct security assessments and architecture reviews to validate security and compliance requirements.
• Support threat modelling activities and risk assessments for new and existing services.
• Support the transition of cloud solutions into operational security environments.
• Ensure operational teams have the controls, monitoring capabilities, and processes required to manage secure services.
• Collaborate with Security Operations, Incident Response, Engineering, and Platform teams to maintain secure systems.
• Drive continuous improvement within security monitoring and incident response capabilities.
• You will work closely with Cloud Engineering, Infrastructure, Security Operations, DevOps, Enterprise Architects, and Programme Leadership.

Skills

Security Architect

Cloud Security

Threat modelling

Regulated environments

Stakeholder management

Active SC Clearance

Tools

Kubernetes

Terraform

GitHub

GitLab

Jenkins

CI/CD Security Tooling

Microsoft Defender Suite

Splunk

Microsoft Sentinel

CrowdStrike

Prisma Cloud

Wiz

Job description

Security Architect

Location: UK (Hybrid/Remote as required)
Security Clearance: Active SC Clearance Required
Contract Length: 6-18 Months
Rate: £545-£590 per day (Inside IR35)

About the Role

We are seeking an experienced Security Architect to join a specialist consultancy supporting the delivery of critical government projects and digital transformation programmes.

This is an exciting opportunity to play a key role in shaping and securing complex cloud environments, ensuring the confidentiality, integrity, and resilience of essential public services. As a Security Architect, you will lead the design and implementation of secure cloud architectures, provide architectural assurance, and champion security-by-design principles across large-scale programmes.

Working closely with engineering, DevOps, infrastructure, security, and delivery teams, you will provide technical leadership, influence strategic decisions, and help clients strengthen their cyber security posture within highly regulated environments.

Key Responsibilities

Cloud Security Architecture

• Define and maintain cloud security architecture, standards, and security frameworks across multiple projects.
• Design secure cloud solutions that meet business, operational, security, and compliance requirements.
• Ensure architectures align with recognised security standards, industry frameworks, and architectural best practices.
• Establish security patterns, principles, and reusable standards for adoption across delivery teams.

Security Strategy & Governance

• Lead the development and continuous improvement of cloud security strategies and roadmaps.
• Ensure security requirements are embedded within technology and business initiatives from inception.
• Support governance activities through architectural assurance and security guidance.
• Conduct design reviews and provide recommendations relating to security risks and control effectiveness.

Security Controls & Risk Management

• Define, document, and oversee the implementation of cloud security controls.
• Identify security risks within cloud environments and recommend mitigation strategies.
• Conduct security assessments and architecture reviews to validate security and compliance requirements.
• Support threat modelling activities and risk assessments for new and existing services.

Cloud Security Operations

• Support the transition of cloud solutions into operational security environments.
• Ensure operational teams have the controls, monitoring capabilities, and processes required to manage secure services.
• Collaborate with Security Operations, Incident Response, Engineering, and Platform teams to maintain secure systems.
• Drive continuous improvement within security monitoring and incident response capabilities.

Stakeholder Engagement

You will work closely with:

• Cloud Engineering Teams
• Infrastructure Teams
• Security Operations Teams
• DevOps Teams
• Enterprise Architects
• Programme and Delivery Leadership

You will provide expert security guidance throughout solution design and implementation while communicating technical risks and recommendations to senior stakeholders.

Skills & Experience

Essential

• Proven experience as a Security Architect, Cloud Security Architect, or Enterprise Security Architect.
• Expertise in:
  • Cloud Security Planning
  • Cloud Security Architecture
  • Cloud Infrastructure Security
  • Cloud Security Assessment
  • Managed Cloud Security Services
• Strong understanding of secure cloud design principles and architecture methodologies.
• Experience securing large-scale cloud environments.
• Strong knowledge of cloud-native security controls and services.
• Experience with threat modelling, risk assessments, and security architecture reviews.
• Ability to translate business requirements into secure technical solutions.
• Experience working within highly regulated environments.
• Strong stakeholder management and communication skills.
• Active SC Clearance.

Desirable

• Experience supporting government departments, public sector organisations, or Critical National Infrastructure programmes.
• Knowledge of:
  • Zero Trust Architecture
  • Secure by Design Principles
  • DevSecOps Methodologies
  • Security Operations & Incident Response
  • Identity & Access Management (IAM)
  • Data Protection & Privacy Controls
  • Enterprise Security Architecture Frameworks
• Familiarity with:
  • NCSC Cloud Security Principles
  • ISO 27001
  • NIST Cybersecurity Framework
  • CIS Controls
  • OWASP

Technical Experience

Cloud Platforms

• AWS
• Microsoft Azure
• Google Cloud Platform (GCP)

Security Technologies

• Microsoft Defender Suite
• Splunk
• Microsoft Sentinel
• CrowdStrike
• Prisma Cloud
• Wiz
• Lacework
• Tenable
• Qualys

Infrastructure & DevOps

• Kubernetes
• Docker
• Terraform
• GitHub
• GitLab
• Jenkins
• CI/CD Security Tooling

Scripting & Automation

• Python
• PowerShell
• Bash

Preferred Certifications

• CISSP (Certified Information Systems Security Professional)
• CCSP (Certified Cloud Security Professional)
• SABSA
• TOGAF
• Microsoft Certified: Azure Security Engineer Associate
• Google Professional Cloud Security Engineer
• CRISC
• CISM

Reasonable Adjustments

Respect and equality are core values to us. We are proud of the diverse and inclusive community we have built, and we welcome applications from people of all backgrounds and perspectives. Our success is driven by our people, united by the spirit of partnership to deliver the best resourcing solutions for our clients.