Security Solution Designer - Network Segmentation

Talent Smart; Sheffield; Hybrid; GBP 80,000 - 100,000; Full time

Job summary

A financial services consultancy is seeking an experienced Security Solution Designer in Sheffield. The ideal candidate has strong expertise in application architecture and network security design, demonstrating the ability to produce high-quality security solutions within a regulatory context. Essential skills include strong application design experience and a software development background, coupled with the capacity to engage with stakeholders effectively. This role requires presence in the Sheffield office up to three days a week.

Qualifications

• Strong application architecture experience in designing modern software systems.
• Experience in network architecture that protects applications.
• Software development background with a strong understanding of networking concepts.

Responsibilities

• Own end-to-end security solution design producing high-quality architecture artifacts.
• Work closely with CTO and network engineering teams to ensure compliance.
• Engage with regulatory stakeholders and delivery teams.

Skills

Application architecture

Network security design

API design

Stakeholder engagement

Documentation skills

Education

Degree in computer science, software engineering, cybersecurity

CISSP, CISM or equivalent certification

TOGAF or SABSA certification

Tools

Jira

Confluence

BizzDesign

Archi

UML

Job description

We are seeking an experienced Security Solution Designer with strong application and network architecture expertise to shape secure, resilient solutions within a regulated financial services environment. This role combines application architecture leadership with network security and segmentation design, requiring someone who can confidently operate across both disciplines.

This is a must-have role for candidates with a software development background first, who deeply understand application architecture, and can also design the network and security controls required to protect those applications.

The role is inside IR35 with a requirement to be in the Sheffield office up to 3-days per week.

The role

You will own end-to-end security solution design, producing high-quality architecture artefacts aligned to enterprise standards, regulatory expectations, and security frameworks (e.g. NIST). You will work closely with CTO and network engineering teams, regulatory stakeholders, and delivery teams to ensure solutions are secure, compliant, and fit for purpose.

This role operates at the intersection of application architecture and network architecture, requiring strong communication, documentation, and stakeholder engagement skills.

Essential experience (must have)

• Strong application architecture experience :
• Designing modern software systems using recognised architecture patterns
• Defining application standards, patterns, and design principles
• API design and system integration
• Strong network security and segmentation experience :
• Designing network architectures that protect applications
• Macro- and micro-segmentation strategies
• Understanding of how network controls enforce application security
• Software development background first, with strong understanding of networking concepts
• Experience combining application architecture and network architecture into a single cohesive design
• Experience working in a financial services environment (preferably smaller banks, fintechs, hedge funds, or similar), with exposure to :
• Regulatory requirements
• Audit findings and remediation
• Strong stakeholder engagement and communication skills
• Proven ability to produce clear, high-quality architecture documentation

Frameworks & tools

• Strong understanding of NIST and related security frameworks
• Experience with architecture modelling tools (BizzDesign, Archi, UML or similar)
• Jira and Confluence for delivery tracking and documentation

Qualifications (preferred)

• Degree in computer science, software engineering, cybersecurity, or related field
• CISSP, CISM, or equivalent security certification
• TOGAF or SABSA certification

More details available on successful application