Security Architect - Secure-by-Design in Hybrid Azure/OT

Southern Water; Worthing; Hybrid; GBP 70,000 - 100,000; Full time

Job summary

Southern Water is seeking a Security Architect to lead secure-by-design across our hybrid cloud, on-premise and OT environments. You will work with architecture forums, security specialists and engineering teams to shape robust security patterns from the start of delivery.

The role emphasizes translating policy into practical designs, advising on risks, and guiding threat modelling, vulnerability assessments and penetration testing to strengthen our cyber posture.

Qualifications

• Experience designing and assuring secure solutions across Azure, on-premise and hybrid environments.
• Strong knowledge of industry frameworks such as NCSC guidance, NIST CSF/800-53, ISO 27001/2 or SABSA.
• Understanding of identity & access management, network security, encryption, API security and secrets management.
• Experience with vulnerability management, penetration testing and security assurance processes.
• Ability to define, document and govern security requirements throughout solution delivery.

Responsibilities

• Define and assure security architecture for new and evolving solutions across applications, infrastructure, cloud, data, integration and OT environments.
• Embed secure-by-design principles into all technology design and delivery processes.
• Translate policy, standards and risk appetite into practical designs and patterns.
• Identify and advise on security risks, ensuring appropriate mitigation or formal risk acceptance.
• Provide expert guidance to architecture forums, governance boards and design authorities.
• Support solution architects and engineering teams in defining clear security and non-functional requirements.
• Lead or contribute to threat modelling, vulnerability assessments and penetration testing activities.

Skills

Azure & Hybrid

Security frameworks

IAM & Encryption

Vulnerability management

Threat modelling

Security requirements

Job description

Southern Water is seeking a Security Architect to lead secure-by-design across our hybrid cloud, on-premise and OT environments. You will work with architecture forums, security specialists and engineering teams to shape robust security patterns from the start of delivery.

The role emphasizes translating policy into practical designs, advising on risks, and guiding threat modelling, vulnerability assessments and penetration testing to strengthen our cyber posture.