Senior Technical Security Architect

National Highways; Otley; Hybrid; GBP 90,000 - 120,000; Full time

Job summary

National Highways in the UK is recruiting a Senior Technical Architect within the Enterprise Security Architecture team to embed security across IT, OT and digital services. You will provide expert guidance shaping secure architectures, risk assessments and governance across programmes and operations.

This hybrid role requires two days per week in the office and offers the opportunity to influence technology roadmaps, security controls and compliance across a large transport network.

Qualifications

• Proven experience translating security strategy and risk into architectural solutions.
• Strong knowledge of security frameworks and their application across IT/OT environments.
• Experience designing and evaluating secure Cloud and IT architectures, including IAM, encryption and network segmentation.
• Advanced security risk assessment, threat modelling and vulnerability analysis skills.
• Practical Secure-by-Design principles and incident guidance experience.

Responsibilities

• Provide strategic security architecture advice across IT, OT and business services, identifying gaps and influencing roadmaps.
• Develop and review high-level and detailed designs, security risk assessments and controls.
• Provide guidance across Cloud and OT environments on configuration management, patching, access management, DR and incident response.
• Drive ongoing improvement of enterprise security frameworks, policies and documentation.
• Support secure lifecycle management of services and systems across transitions and decommissions.

Skills

Security architecture

Cloud security

Risk assessment

Threat modelling

Secure-by-Design

Education

Certifications in security architecture (e.g., CISSP)

Tools

ISO 27001

NIST

GDPR

IEC 62443

Job description

About the job.

As part of the development of our Digital Services function, we are recruiting to strengthen internal digital capability within Cyber Security, Digital Operational Services, and Digital Corporate and Shared Services. These roles are central to building sustainable in‑house expertise that supports the management, development and delivery of digital solutions across the transport network.

As a Senior Technical Architect in the Enterprise Security Architecture team at National Highways, you will play a key role in embedding security across our digital ecosystem, helping to ensure our IT, Operational Technology (OT) and business services are designed, delivered and operated securely. Working within Digital Services and alongside the wider Security teams, you will be pivotal in driving the integration of security into architectures, technologies and processes to support the delivery of resilient, compliant and business‑focused services.

You will work across programmes, projects and operational environments, providing expert advice on security architecture, risk, technology and governance. This is an opportunity to influence how security is built into our services from the outset, while helping us continuously improve our security capability across a complex and evolving technology landscape.

This is a hybrid role, requiring two days per week in the office, and can be based at any National Highways office location across the UK, with some travel to attend team meetings.

Successful candidates will be required to hold or be willing to obtain SC clearance before starting employment. Five years' UK residency is normally required for the vetting process, although individual circumstances will be considered as part of the recruitment process.

• Provide strategic security architecture advice across IT, OT and business services, identifying security gaps, emerging risks and opportunities to influence technology roadmaps, investment decisions and digital transformation.
• Contributing to and maintenance of secure architecture design and assurance, including the development and review of high‑level and detailed designs, security risk assessments and the application of appropriate security controls, standards and principles.
• Provide expert technical guidance across Cloud and Operational Technology environments, supporting effective approaches to configuration management, patching, access management, disaster recovery and incident response.
• Drive continuous improvement of enterprise security frameworks, policies and practices, incorporating industry developments, performance and usability considerations while maintaining accurate documentation and compliance records.
• Support the secure lifecycle management of services and systems, including transition and decommissioning, ensuring security requirements, compliance and auditability are maintained throughout.

About you.

• Proven experience in security architecture, with the ability to translate security strategy and risk into practical architectural solutions that support organisational objectives and digital transformation.
• Strong knowledge of security, regulatory and industry frameworks (e.g. including ISO 27001, NIST, GDPR and IEC 62443), with the ability to apply these across business, IT and OT environments.
• Demonstrable experience designing and evaluating secure Cloud and IT architectures, including identity and access management, encryption and network segmentation.
• Advanced experience in security risk assessment, threat modelling and vulnerability analysis across complex IT and OT environments
• Practical experience applying Secure‑by‑Design principles, overseeing security testing, advising on compliance and providing technical guidance during security incidents.

About us.

Here at National Highways, we manage and improve England's motorways and major A roads, helping our customers have safer, smoother and more reliable journeys. Our priorities are safety, customers and delivery, and at the core of this, are our values of passion, integrity, safety, teamwork and ownership.

The Digital Services Directorate is helping to reshape the way National Highways operates by delivering digital, data, and technology services across all areas, from frontline to back office, in a modern and efficient manner. Our vision is to develop integrated information and technology that empowers our colleagues and provides real‑time information to our customers, as well as integrating with intelligent vehicle and transport systems as they evolve, to enhance journey safety and reliability.

External candidates will be offered a starting salary at the lower end of the pay scale, while current employees will be appointed in accordance with our established pay policy.

We are committed to creating a diverse environment and welcome applicants from all backgrounds.