Technical Architect

CBSbutler Holdings Limited trading as CBSbutler; City Of London; On-site; GBP 125,000 - 150,000; Full time

Job summary

A technical solutions provider is looking for a Technical Architect to work on-site in London. The role involves developing High-Level Designs and securing data centre networks. Applicants should have experience in VMware platforms, strong knowledge in network security, and relevant certifications. Daily rates range from £650 to £700 for a contract duration of 6 months, outside IR35.

Qualifications

• Proven ability to lead design workshops & governance board presentations.
• Strong documentation skills (HLDs, LLDs, Build Guides).
• Knowledge of CIS, STIG, and NIST 800-53 frameworks.

Responsibilities

• Develop HLDs, LLDs, build guides for infrastructure solutions.
• Architect secure, multi-tenant data centre networks.
• Design/manage VMware private cloud platforms.
• Deliver containerisation, secrets management, and enterprise messaging systems.
• Present to Technical Design Authority as SME for infrastructure stack.

Skills

Data Centre Networking

Network Security

Private Cloud & HCI

Software-Defined Networking (SDN)

Security Architecture

Operating Systems

Application Platforms

EUC

Education

Certifications such as CISSP, CCNP

Tools

Palo Alto firewalls

VMware NSX-T

Terraform

Ansible

Prometheus

Splunk

Job description

Overview

Technical Architect

On site in London • 6 months + • Outside IT35 • £650 - £700 a day • DV cleared contract

Key Responsibilities

• Architecture & Design – Develop HLDs, LLDs, and build guides for end-to-end infrastructure solutions. Ensure alignment with security frameworks (Secure By Design, NCSC CAF, NIST 800-53).
• Networking & Security – Architect secure, multi-tenant data centre networks (Clos-fabric, advanced BGP, DCI). Implement strong security using Palo Alto firewalls, VMware NSX-T micro-segmentation, and cross-domain solutions.
• Compute & Virtualisation – Design/manage VMware VCF private cloud platforms, VxRail/vSAN hyper-converged compute, and software-defined networking.
• Platform & Application Services – Deliver containerisation, secrets management, and enterprise messaging systems (Docker, RabbitMQ).
• Governance & Leadership – Present to the Technical Design Authority, act as SME for infrastructure stack, and enforce CIS/STIG compliance.
• Automation – Drive Infrastructure as Code (IaC) adoption and automated infrastructure deployment.

Core Technical Expertise

• Data Centre Networking – Clos-fabric, VRFs, EBGP, ECMP, active/active DCI.
• Network Security – Palo Alto firewalls, high-grade crypto.
• Private Cloud & HCI – VMware VCF, VxRail/vSAN, Veeam.
• Software-Defined Networking (SDN) – VMware NSX-T (Geneve overlays, Edge Node config, DFW, NSX Federation).
• Security Architecture – Multi-tier secure environments (DMZs, CDS, Diodes/HAGs, AV - Trellix preferred).
• Operating Systems – Senior Linux (Ubuntu) & Windows (Server 2025, SQL 2022, AD, PKI, MECM).
• Application Platforms – Docker, CI/CD pipelines, secrets management, object storage (S3).
• EUC – Omnissa Horizon, UAGs, Zero/Thin client environments.

Desirable Skills

• EVPN/VXLAN, Fortigate, Panorama, VMware SSP (vDefend).
• IaC (Terraform, Ansible), CI/CD (GitLab), Python orchestration.
• Observability (Prometheus, Grafana), SIEM (Splunk, Aria Logs).
• Advanced VMware: SRM, Avi Load Balancer, Workspace ONE.
• Application/data platforms: Kubernetes, Vault, Redis, RabbitMQ, Elastic Stack.
• Dell Powerscale & NVIDIA GPU passthrough experience.

Professional Skills & Qualifications

• Proven ability to lead design workshops & governance board presentations.
• Strong documentation skills (HLDs, LLDs, Build Guides).
• Knowledge of CIS, STIG, and NIST 800-53 frameworks.
• Certifications such as CISSP, CCNP (or equivalent experience) desirable.

If you’d like to discuss this Technical Architect role in more detail, please send your updated CV to (url removed) and I will get in touch.