Solutions Architect

Thrive IT Systems; Sheffield; On-site; GBP 90,000 - 120,000; Full time

Job summary

Thrive IT Systems in the United Kingdom is seeking a Senior Cybersecurity Solution Architect to lead the technical design of secure systems and services within our assessment and testing environment.

You will drive secure development practices, review architectural designs for risk and compliance, and mentor engineering teams on security technologies across Kubernetes and GCP environments, ensuring alignment with governance and CI/CD processes.

Qualifications

• Extensive experience in information security and IT risk management with a focus on security performance and reliability.
• At least 5 years of experience designing and owning application and service architectures.
• Strong experience across infrastructure, application, process and integration architecture layers.
• Strong expertise in cloud technologies and integration with on-premises data centres.
• Practical experience with Kubernetes and GCP.

Responsibilities

• Lead the technical design of systems and services within the Cybersecurity Assessment and Testing environment.
• Review change requests and solution designs to identify architectural concerns, business requirement gaps, security risks and control-related issues.
• Ensure new solutions comply with secure development strategies, security architecture standards and control principles.
• Develop and maintain architectural artefacts including Architecture Impact Assessments, External Hosting Considerations and Solution Design Documents.
• Drive functional, nonfunctional, technical and architectural requirements aligned with business needs and security strategy.
• Guide the integration of cloud and on-premises platforms, particularly Kubernetes and GCP environments.
• Support architecture across application, infrastructure, process and service layers and CI/CD pipelines.
• Collaborate with Engineering, Cybersecurity, Business Analysis and Enterprise Architecture teams; influence senior stakeholders.

Skills

Cybersecurity solution architecture

Cloud Kubernetes & hybrid architecture

Vulnerability management integration

Job description

• Lead the technical design of systems and services within the Cybersecurity Assessment and Testing environment
• Review change requests and solution designs to identify architectural concerns business requirement gaps security risks and controlrelated issues
• Ensure new solutions comply with secure development strategies security architecture standards and control principles
• Develop and maintain architectural artefacts including
• Architecture Impact Assessments
• External Hosting Considerations
• Solution Design Documents
• Design Authority documentation and approvals
• Drive functional nonfunctional technical and architectural requirements aligned with business needs and security strategy
• Support cloudhosting and enterprise architecture governance approvals
• Advise engineering teams on security technologies and assess risks associated with proposed changes
• Define reusable architectural patterns and support quality assurance initiatives
• Guide the integration of cloud and onpremises platforms particularly Kubernetes and GCP environments
• Support architecture across application infrastructure process and service layers
• Ensure effective integration with CICD pipelines and SDLC build services
• Collaborate with Engineering Cybersecurity Business Analysis Enterprise Architecture and other crossfunctional teams
• Influence senior stakeholders and communicate complex architectural decisions clearly
• Support vulnerability management platforms securityscanning integrations data pipelines and Kubernetesbased services
• Monitor emerging cybersecurity technologies and trends to enhance existing and future solutions

To Be Successful in This Role You Should Have

• Extensive experience in information security andor IT risk management with a focus on security performance and reliability
• At least 5 years of experience designing and owning application and service architectures
• Strong experience across infrastructure application process and integration architecture layers
• Strong expertise in cloud technologies and integration with onpremises data centres
• Practical experience with Kubernetes and GCP
• Good understanding of CICD pipelines SDLC DevOps and DevSecOps practices
• Experience developing and maintaining functional and nonfunctional requirements with Business Analysts
• Solid knowledge of security protocols cryptography authentication and authorisation
• Strong understanding of current IT risks and experience implementing security solutions
• Experience producing architecture assessments solution designs hosting considerations and governance documentation
• Knowledge of vulnerabilityscanning capabilities including
• MAST
• DAST
• SAST
• Container scanning
• Infrastructure as Code scanning
• FOSSSCA
• Cloud scanning
• Infrastructure scanning
• Knowledge of securityscanning tools such as Nessus Nexus IQ Checkmarx Netsparker Wiz and Quokka is desirable
• Experience managing large datasets and complex data pipelines
• Strong stakeholder management influencing and communication skills
• Ability to explain and enforce security measures across technical and nontechnical teams
• Strong business acumen and the ability to justify architectural and security decisions
• 3 Most Important Skills Critical for Success
• Cybersecurity Solution Architecture
• Ability to lead secure application and service architecture assess technical risks produce architectural artefacts and ensure solutions comply with security architecture standards and governance requirements
• Cloud Kubernetes and Hybrid Platform Architecture
• Strong expertise in Kubernetes GCP cloud hosting onpremises datacentre integration CICD pipelines and designing secure services across hybrid environments
• Vulnerability Management and Security Integration
• Understanding of vulnerabilityscanning capabilities security tools DevSecOps integration large security datasets and complex data pipelines used for vulnerability processing remediation and reporting

Skills

Mandatory Skills : Cybersecurity & AI Laws, Kubernetes