Senior Security Architect: Remediation & Architecture Lead

undisclosed; England; On-site; GBP 92,000 - 121,000; Full time

Job summary

undisclosed is seeking a security-led architect to lead the Defra Text Alert Service assessment. You will define remediation strategies for security vulnerabilities, debt and governance, review hosting and data flows, and align with Defra standards while working with architecture teams and CCoE engineers.

The role emphasizes translating findings into actionable controls, determining security assurance levels, and guiding remediation activities to meet Defra cloud, data protection and governance

Responsibilities

• Lead the architectural assessment of the Defra Text Alert Service to define remediation approach for security vulnerabilities, debt, supportability and architectural risks.
• Review existing Text Alert Service architecture, integrations, hosting, data flows and operations model.
• Assess known technical and security concerns including Cosmos DB remediation, infrastructure config, identity and secrets management, data protection.
• Identify architectural debt, resilience issues and supportability risks from knowledge loss and lack of structured support.
• Develop and assess architectural options, costs, risks, benefits and timescales; provide recommendations on preferred approach.
• Support engagement and service design discussions; assess service criticality and Tier 1 classification; review need for IT Health Checks.
• Lead security assurance activities; translate findings into remediation requirements and controls; ensure alignment with Defra security, cloud, data protection and governance.

Job description

undisclosed is seeking a security-led architect to lead the Defra Text Alert Service assessment. You will define remediation strategies for security vulnerabilities, debt and governance, review hosting and data flows, and align with Defra standards while working with architecture teams and CCoE engineers.

The role emphasizes translating findings into actionable controls, determining security assurance levels, and guiding remediation activities to meet Defra cloud, data protection and governance