Security Solution Architect

LT Harper Group; Greater London; Hybrid; GBP 101,000 - 111,000; Full time

Job summary

LT Harper Group seeks a Security Solution Architect to define and deliver the future-state network and identity architecture across multiple sites in the Greater South-East London area. The contract role runs initially for 3 months with hybrid working – one day on-site per week – and a clear design authority to own architecture documentation and risk decisions.

The candidate will shape segmentation across stores, data centres and cloud, implementing Zero Trust principles while coordinating with

Qualifications

• Security architecture and solution design experience covering both network and identity.
• Hands-on design work with hybrid Active Directory and Entra ID, including Conditional Access and privileged access.
• Fortinet architecture and network segmentation design.
• Experience turning audit findings into remediation plans.
• Confident engaging stakeholders across internal teams, MSPs and suppliers.

Responsibilities

• Define the future-state network architecture across a multi-site WAN, Azure networking and core services such as DNS and DHCP.
• Set the identity and access control strategy for a hybrid Active Directory and Microsoft Entra ID estate, including MFA, Conditional Access, Privileged Access Management and role-based access control.
• Design segmentation approaches for stores, data centres and cloud, built on Zero Trust principles.
• Turn audit findings into practical technical remediation plans.
• Act as design authority, owning architecture documentation and technical risk decisions.
• Gather security requirements from internal teams, managed service providers and third parties, and bring them into the design.

Skills

Security architecture

Hybrid AD & Entra ID

Fortinet design

Audit remediation

Stakeholder engagement

Job description

Security Solution Architect (Network & Identity) | Contract | Greater South-East London

Hybrid working - 1 day a week on-site

You'll set the future-state network and identity architecture for a multi-site organisation. The work covers segmentation across multiple sites, data centres and cloud, with clear goals: fewer attack paths, less room for lateral movement, and controls that work within day-to-day operations.

The essentials

• £550 to £600 per day, outside IR35
• Initial 3 months full-time

What you'll actually do

• Define the future-state network architecture across a multi-site WAN, Azure networking and core services such as DNS and DHCP.
• Set the identity and access control strategy for a hybrid Active Directory and Microsoft Entra ID estate, including MFA, Conditional Access, Privileged Access Management and role-based access control.
• Design segmentation approaches for stores, data centres and cloud, built on Zero Trust principles.
• Turn audit findings into practical technical remediation plans.
• Act as design authority, owning architecture documentation and technical risk decisions.
• Gather security requirements from internal teams, managed service providers and third parties, and bring them into the design.

What you'll need

• Security architecture and solution design experience covering both network and identity
• Hands-on design work with hybrid Active Directory and Entra ID, including Conditional Access and privileged access
• Fortinet architecture and network segmentation design
• Experience turning audit findings into remediation plans
• Confident engaging stakeholders across internal teams, MSPs and suppliers

Nice to have

• Retail or other multi-site estate experience
• SSO and federation technologies

What's in it for you

This is a clearly scoped piece of work with defined outcomes and real design authority. You'll shape the security architecture for the whole estate, not just support it.