Security Architect (Zero Trust) - DV Cleared

Sanderson Government & Defence; Farnborough; On-site; GBP 70,000 - 85,000; Full time

Benefits offered by this job

Flexible and hybrid working options

Comprehensive benefits package

Job summary

Sanderson Government & Defence is seeking a Security Architect specialising in Zero Trust to design and implement enterprise security across cloud and on‑prem environments. You will lead identity‑centric strategies, governance and risk programmes, and drive security architecture across senior stakeholders.

Based in Farnborough with hybrid working, the role requires DV clearance and offers a competitive package for shaping critical national security systems.

Qualifications

• 10+ years of cyber security and information security experience.
• Minimum 5 years in a Security Architect role.
• Proven delivery of enterprise Zero Trust transformations.
• Experience in defence, aerospace, government or regulated sectors.
• Experience with DV clearance or equivalent is advantageous.

Responsibilities

• Define enterprise Zero Trust strategies and roadmaps.
• Design Zero Trust architectures aligned to NIST 800-207.
• Lead IAM, MFA and SSO initiatives across the organisation.
• Architect security across cloud, network, endpoint and applications.
• Run security architecture reviews and risk assessments.

Skills

Zero Trust

Security architecture

Identity & Access Management

Threat intelligence

Tools

SIEM

EDR/XDR

PAM

Job description

Security Architect - Zero Trust - DV Cleared

• Location: Farnborough, Hampshire, UK
• Employment Type: Permanent, Full-Time
• Security Clearance: Developed Vetting (DV) - Essential
• Salary: £70,000 - £85,000 + Benefits

About the Role

We are seeking a highly experienced Security Architect with a strong focus on Zero Trust Architecture (ZTA) to design, implement and evolve secure enterprise environments. You will lead security transformation initiatives, develop enterprise-wide security strategies, and implement identity-centric security architectures aligned with modern Zero Trust principles. This role requires deep expertise across identity, cloud, infrastructure and cyber security domains, ensuring organisations remain resilient against evolving cyber threats whilst meeting security requirements.

Key Responsibilities

Zero Trust Strategy & Architecture

• Define and deliver enterprise-wide Zero Trust strategies and roadmaps
• Design Zero Trust architectures aligned to NIST 800-207 principles
• Implement identity-first security models across users, devices, applications and data
• Develop continuous verification and adaptive access control frameworks
• Lead micro-segmentation and least privilege initiatives across enterprise environments

Security Strategy & Architecture

• Design holistic security architectures incorporating people, process and technology security
• Develop enterprise-wide security strategies aligned with and Defence Security Policy requirements
• Architect defence-in-depth security solutions across network, cloud, endpoint and application layers
• Lead security architecture reviews and technical security assessments
• Develop security standards, reference architectures and design patterns

Identity & Access Management

• Architect and implement enterprise IAM, MFA and Single Sign-On solutions
• Design Conditional Access and Privileged Access Management (PAM) capabilities
• Lead identity governance and administration initiatives
• Develop secure authentication and authorisation frameworks
• Ensure access management aligns with Zero Trust and least privilege principles

Cyber Threat & Risk Management

• Assess cyber threat landscapes and design threat-informed security architectures
• Lead security risk assessments and vulnerability management programmes
• Design incident response, threat intelligence and cyber defence capabilities
• Architect security monitoring, detection and response solutions
• Develop cyber resilience and business continuity frameworks

Cloud & Security Solutions

• Design cloud security architectures across Azure, AWS and hybrid environments
• Architect endpoint protection, DLP and advanced threat protection solutions
• Design application security, API security and secure SDLC integration
• Architect Security Operations Centre (SOC) and SIEM capabilities
• Lead security technology evaluation, selection and implementation programmes

Technical Leadership & Governance

• Lead security technical teams and provide architectural mentoring
• Establish security design standards, architecture patterns and governance processes
• Drive technical decision-making through security design reviewsDocument security architecture decisions and design specifications
• Support organisational security transformation programmes

Customer & Stakeholder Engagement

• Act as the subject matter expert for Security Architecture and Zero Trust initiatives
• Present security recommendations to senior leadership and programme stakeholders
• Lead architecture workshops and customer engagement activities
• Communicate complex security concepts to both technical and non-technical audiences

Essential Requirements

Experience & Expertise

• Minimum 10 years' experience within Cyber Security and Information Security
• At least 5 years' experience in a Security Architect position
• Proven experience delivering enterprise-scale Zero Trust transformation programmes
• Strong background within defence, aerospace, government or highly regulated sectors
• Experience leading security transformation and modernisation initiatives

Technical Knowledge

• Deep expertise in Zero Trust Architecture principles and implementation methodologies
• Strong knowledge of NIST 800-207 and modern security architecture frameworks
• Expert understanding of Identity & Access Management technologies
• Experience with Microsoft Entra ID, Conditional Access, PIM and PAM solutions
• Strong understanding of network security, micro-segmentation and secure access technologies
• Proficiency in cloud security across Azure, AWS or equivalent platforms
• Knowledge of security technologies including SIEM, EDR/XDR, DLP, CASB, ZTNA, WAF and firewalls
• Understanding of cryptography, encryption standards and secure communication protocols
• Familiarity with MOD security requirements, defence standards and accreditation processes
• Knowledge of ISO 27001, NIST CSF and CIS Controls frameworks

Personal Attributes

• Exceptional strategic thinking combined with strong technical depth
• Outstanding communication and stakeholder engagement skills
• Strong problem-solving and analytical capabilitiesProven ability to influence technical teams and executive stakeholders
• Passion for cyber security innovation and continuous improvement

Desirable Requirements

• Experience delivering Microsoft Zero Trust programmes
• CISSP, CISM, SABSA, TOGAF or equivalent industry certifications
• Microsoft Cybersecurity Architect Expert certification
• AWS Security Specialty or Azure Security Engineer certification
• Experience implementing SASE, SSE or ZTNA technologies
• Knowledge of ITAR compliance and export controls
• Previous DV or SC Clearance
• Armed Forces, Defence or National Security background

What We Offer

• Highly competitive salary and comprehensive benefits package
• Enhanced pension and private medical insurance
• Flexible and hybrid working options
• Professional development and industry certification support
• Opportunity to lead strategic Zero Trust transformation programmes
• Exposure to mission-critical defence and national security projects

Reasonable Adjustments:

Respect and equality are core values to us. We are proud of the diverse and inclusive community we have built, and we welcome applications from people of all backgrounds and perspectives. Our success is driven by our people, united by the spirit of partnership to deliver the best resourcing solutions for our clients.

If you need any help or adjustments during the recruitment process for any reason, please let us know when you apply or talk to the recruiters directly so we can support you.