Security Assurance Architect — Defence IT, Design Lead

GBA5 EntServ UK Limited; Farnborough; On-site; GBP 90,000 - 130,000; Full time

Benefits offered by this job

Competitive salary and benefits

Enhanced pension

Private medical insurance

Flexible working around customer site

Security training and development

Defence programmes exposure

Cutting-edge defence technology

Job summary

DXC Technology in Farnborough is seeking a Security Architect (Joint Design Team) to lead security architecture, design authority and assurance for defence IT programmes. You will define secure solution architectures, ensure Secure by Design and JSP 440 requirements from the outset, identify risks and specify controls.

Working with client delivery teams and risk owners, you will influence technical architects and client teams, applying Zero Trust, cross-domain solutions and NCSC guidelines to

Qualifications

• 8+ years in information security with architecture or design assurance experience.
• Experience designing secure solutions across on-prem, hybrid and cloud environments.
• Experience with Secure by Design and defence-security standards.
• Ability to lead security design reviews and mentor architects.
• Knowledge of threat modelling and risk assessment methodologies.

Responsibilities

• Act as security design authority, defining architecture, patterns and controls.
• Develop and validate threat models and security assumptions.
• Design multi-classification architectures (OFFICIAL, SECRET and above) ensuring cross-domain patterns.
• Apply Zero Trust to on-prem, hybrid and cloud hosting.
• Produce security documentation and compliance matrices.

Skills

Security architecture

Threat modelling

Zero Trust

Design authority

DV clearance

SABSA/TOGAF

NCSC guidance

Job description

DXC Technology in Farnborough is seeking a Security Architect (Joint Design Team) to lead security architecture, design authority and assurance for defence IT programmes. You will define secure solution architectures, ensure Secure by Design and JSP 440 requirements from the outset, identify risks and specify controls.

Working with client delivery teams and risk owners, you will influence technical architects and client teams, applying Zero Trust, cross-domain solutions and NCSC guidelines to