Security Architect (SC) – Defence & Cloud Security Lead

Sanderson Government & Defence; Reading; Hybrid; GBP 60,000 - 90,000; Full time

Job summary

Sanderson Government & Defence is seeking an experienced Security Architect to support secure digital transformation programmes within government and defence sectors. The role covers cloud, infrastructure, application and enterprise security, ensuring security is embedded throughout the solution lifecycle and supporting assurance, accreditation and compliance.

The ideal candidate will have MOD or government context, with strong governance, risk management and architecture practices.

Qualifications

• Active SC Clearance.
• Experience as a Security Architect in Defence, Government or highly regulated environments.
• Experience applying MOD security policies JSP 400, JSP 441 and JSP 453.
• Experience producing security artefacts to support assurance, accreditation and compliance.
• Strong understanding of security architecture frameworks and methodologies.
• Experience threat modelling, risk assessments and security assurance activities.
• Knowledge of ISO 27001/27002, NIST RMF and NIST 800-53.
• Experience designing secure cloud, infrastructure and network solutions.
• Strong stakeholder engagement, communication and documentation skills.

Responsibilities

• Design and assure secure architectures across cloud, infrastructure, networks, applications and data platforms.
• Lead security architecture reviews and provide guidance throughout project lifecycles.
• Apply Secure by Design principles to government and defence programmes.
• Promote Zero Trust, Defence-in-Depth and Least Privilege principles.
• Develop architecture patterns, standards and security roadmaps.

Skills

SC Clearance

Security Architecture

JSP 400

JSP 441

JSP 453

Threat Modelling

ISO 27001

NIST RMF

NIST 800-53

Cloud Security

Azure/AWS

Stakeholder Engagement

Architecture Review

Security Assurance

Job description

Sanderson Government & Defence is seeking an experienced Security Architect to support secure digital transformation programmes within government and defence sectors. The role covers cloud, infrastructure, application and enterprise security, ensuring security is embedded throughout the solution lifecycle and supporting assurance, accreditation and compliance.

The ideal candidate will have MOD or government context, with strong governance, risk management and architecture practices.