Solution Architect

TESTQ Technologies LTD.; Sheffield; Hybrid; GBP 90,000 - 120,000; Full time

Job summary

TESTQ Technologies LTD. in the United Kingdom is seeking a Senior Cybersecurity Solution Architect to lead secure system and service designs within our security assessment and testing environment.

You will review architecture decisions, risk and compliance gaps, and drive secure, scalable cloud and on-premise integrations, especially Kubernetes and GCP. You will collaborate with Engineering, Cybersecurity, Business Analysis and Enterprise Architecture teams, shaping architectural artefacts and

Qualifications

• Extensive experience in information security and IT risk management.
• At least 5 years designing and owning application architectures.
• Strong experience across infrastructure, application, process and integration architecture layers.
• Practical experience with Kubernetes and Google Cloud Platform (GCP).
• Knowledge of security scanning tools and DevSecOps practices.

Responsibilities

• Lead the technical design of systems and services within the Cybersecurity Assessment and Testing environment.
• Review change requests and designs to identify architectural concerns, gaps, risks and control issues.
• Ensure new solutions comply with secure development strategies, standards and control principles.
• Develop and maintain architectural artefacts including Architecture Impact Assessments and Solution Design Documents.
• Drive functional, nonfunctional, technical and architectural requirements aligned with business needs and security strategy.
• Guide the integration of cloud and on-prem platforms, particularly Kubernetes and GCP environments.
• Collaborate with Engineering, Cybersecurity, Business Analysis and Enterprise Architecture teams.
• Influence senior stakeholders and communicate complex architectural decisions clearly.

Skills

Cybersecurity Solution Architecture

Kubernetes & Cloud Integration

Vulnerability Management & Security

Job description

Experience 7 to 11

Responsibilities

• Lead the technical design of systems and services within the Cybersecurity Assessment and Testing environment
• Review change requests and solution designs to identify architectural concerns business requirement gaps security risks and controlrelated issues
• Ensure new solutions comply with secure development strategies security architecture standards and control principles
• Develop and maintain architectural artefacts including
• Architecture Impact Assessments
• External Hosting Considerations
• Solution Design Documents
• Design Authority documentation and approvals
• Drive functional nonfunctional technical and architectural requirements aligned with business needs and security strategy
• Support cloudhosting and enterprise architecture governance approvals
• Advise engineering teams on security technologies and assess risks associated with proposed changes
• Define reusable architectural patterns and support quality assurance initiatives
• Guide the integration of cloud and onpremises platforms particularly Kubernetes and GCP environments
• Support architecture across application infrastructure process and service layers
• Ensure effective integration with CICD pipelines and SDLC build services
• Collaborate with Engineering Cybersecurity Business Analysis Enterprise Architecture and other crossfunctional teams
• Influence senior stakeholders and communicate complex architectural decisions clearly
• Support vulnerability management platforms securityscanning integrations data pipelines and Kubernetesbased services
• Monitor emerging cybersecurity technologies and trends to enhance existing and future solutions

To Be Successful in This Role You Should Have

• Extensive experience in information security andor IT risk management with a focus on security performance and reliability
• At least 5 years of experience designing and owning application and service architectures
• Strong experience across infrastructure application process and integration architecture layers
• Strong expertise in cloud technologies and integration with onpremises data centres
• Practical experience with Kubernetes and GCP
• Good understanding of CICD pipelines SDLC DevOps and DevSecOps practices
• Experience developing and maintaining functional and nonfunctional requirements with Business Analysts
• Solid knowledge of security protocols cryptography authentication and authorisation
• Strong understanding of current IT risks and experience implementing security solutions
• Experience producing architecture assessments solution designs hosting considerations and governance documentation
• Knowledge of vulnerabilityscanning capabilities including
• MAST
• DAST
• SAST
• Container scanning
• Infrastructure as Code scanning
• FOSSSCA
• Cloud scanning
• Infrastructure scanning
• Knowledge of securityscanning tools such as Nessus Nexus IQ Checkmarx Netsparker Wiz and Quokka is desirable
• Experience managing large datasets and complex data pipelines
• Strong stakeholder management influencing and communication skills
• Ability to explain and enforce security measures across technical and nontechnical teams
• Strong business acumen and the ability to justify architectural and security decisions

3 Most Important Skills Critical for Success

• Cybersecurity Solution Architecture
• Ability to lead secure application and service architecture assess technical risks produce architectural artefacts and ensure solutions comply with security architecture standards and governance requirements
• Cloud Kubernetes and Hybrid Platform Architecture
• Strong expertise in Kubernetes GCP cloud hosting onpremises datacentre integration CICD pipelines and designing secure services across hybrid environments
• Vulnerability Management and Security Integration
• Understanding of vulnerabilityscanning capabilities security tools DevSecOps integration large security datasets and complex data pipelines used for vulnerability processing remediation and reporting

Skills

Mandatory Skills : Cybersecurity & AI Laws, Kubernetes