Technical Security Architect

PHET Enterprise Services (AP) Limited, Philippines Regional Operating Headquarters; England; On-site; GBP 90,000 - 125,000; Full time

Job summary

DXC Technology is seeking a Technical Security Architect in the United Kingdom, on-site in Hampshire. The role focuses on designing, developing, and maintaining security architectures to protect information systems, data, and infrastructure.

You will drive the tech refresh and evergreen strategy for security tools, ensuring alignment with evolving threats, client policies, and cross-domain architectural patterns. You will lead detailed designs, evaluate technologies, and guide delivery teams.

Qualifications

• TOGAF or SABSA certification or equivalent.
• Deep expertise across IAM, boundary/perimeter, cloud, endpoint and network security.
• Experience leading security toolset refresh and migrations.
• Strong cloud architecture experience (AWS/Azure/GCP).

Responsibilities

• Design and develop security architectures for services, platforms, and infra.
• Lead security toolset refresh and evergreen efforts.
• Align architectures with cross-domain patterns across infra, network, data and apps.
• Define cloud security reference architectures for multi-cloud.
• Design IAM architectures supporting break-glass and audit trails.
• Design boundary and network security supporting Zero Trust principles.
• Define secure build standards and CIS/DISA baselines.

Skills

TOGAF

SABSA

CISSP

IAM

Boundary security

Cloud security

Endpoint security

Network security

Secure platform architectures

Security toolset refresh

Job description

Job Description

Technical Security Architect Due to the nature of the work and the customers we support, the successful candidate must be eligible to meet UK Government and contractual personnel security requirements, including the applicable residency requirements for the role, and have the right to work in the United Kingdom. Some roles may also be subject to nationality requirements where these are necessary to meet UK Government or contractual security obligations. The role is based on-site in Hampshire 5 days a week.

Role Summary

The Technical Security Architect is responsible for designing, developing, and maintaining technical security architectures that protect the organisation's information systems, data, and infrastructure. Embedded within the Technical team, this role leads the tech refresh and evergreening of security toolsets — ensuring the security technology estate remains current, supported, effective, and aligned with evolving threat landscapes, client policies, and cross-domain architectural patterns. The Technical Security Architect is expected to produce detailed technical designs, evaluate and select security technologies, define integration patterns, and guide implementation teams through delivery. The role requires deep technical expertise across cloud security, identity and access management, boundary and perimeter security, secure platform architectures, and security tooling ecosystems.

Key Responsibilities

Security Architecture Design & Development

Design and develop technical security architectures for new and existing services, platforms, and infrastructure. Produce detailed security architecture documentation including High-Level Designs (HLDs), Low-Level Designs (LLDs), security patterns, data flow diagrams, and integration specifications. Define security architecture principles, standards, and patterns that guide technology decisions across the organisation. Ensure security architectures address the full security stack: identity, authentication, authorisation, encryption, network segmentation, boundary protection, endpoint security, logging, monitoring and incident detection.

Security Toolset Tech Refresh & Evergreening

Lead the technical planning, design, and architecture for the refresh and evergreening of the security toolset estate. Develop tech refresh roadmaps for security toolsets — prioritised by risk exposure, vendor support status, capability gaps and strategic alignment. Evaluate, assess, and recommend security technologies through structured evaluation processes including proof of concept (PoC), proof of value (PoV) and technical benchmarking.

Cross-Domain Architecture & Pattern Alignment

Ensure security architectures align with and contribute to cross-domain architectural patterns — including infrastructure, network, platform, application, and data architecture. Define reusable security architecture patterns and reference architectures that can be applied consistently across projects and services. Collaborate with enterprise architects, infrastructure architects, network architects and application architects to ensure security is embedded in all architectural decisions — not bolted on.

Cloud Security Architecture Design

Security architectures for public cloud (AWS, Azure, GCP), private cloud, hybrid cloud and multi-cloud environments. Define cloud security reference architectures.

Identity & Access Management Architecture Design

Design and maintain IAM architectures Ensure IAM architectures support operational requirements including break-glass procedures, emergency access and audit trail integrity.

Boundary & Network Security Architecture Design

Boundary and network security architectures Ensure boundary security designs support both traditional perimeter models and Zero Trust Network Architecture (ZTNA) principles.

Secure Platform Architecture Design

Security controls and hardening standards for platform architectures Define secure build standards, hardening baselines (CIS Benchmarks, DISA STIGs) and compliance validation approaches.

Risk Management & Threat-Informed Design

Apply threat modelling methodologies (e.g., STRIDE, MITRE ATT&CK, kill chain analysis) to inform security architecture decisions. Identify, assess and document security risks associated with architectural designs, technology choices, and toolset transitions. Maintain a security architecture risk register and ensure risks are communicated to stakeholders with clear mitigation recommendations.

Required Skills & Experience Essential

Significant experience in a Technical Security Architect or Senior Security Engineer role, designing and delivering security architectures in complex enterprise environments. TOGAF and/or SABSA certification CISSP certification (or equivalent) Deep technical expertise across multiple security domains: identity & access management, boundary/perimeter security, cloud security, endpoint security, network security and secure platform architectures. Proven experience leading security toolset refresh, migration and evergreening programmes. Strong experience designing security architectures for cloud environments (AWS, Azure and/or GCP).

At DXC Technology, we believe strong connections and community are key to our success. Our work model prioritises in-person collaboration while offering flexibility to support wellbeing, productivity, individual work styles & life circumstances. We’re committed to fostering an inclusive environment where everyone can thrive.

Recruitment fraud is a scheme in which fictitious job opportunities are offered to job seekers typically through online services, such as false websites, or through unsolicited emails claiming to be from the company. These emails may request recipients to provide personal information or to make payments as part of their illegitimate recruiting process. DXC does not make offers of employment via social media networks and DXC never asks for any money or payments from applicants at any point in the recruitment process, nor ask a job seeker to purchase IT or other equipment on our behalf. More information on employment scams is available here.

DXC Technology (NYSE: DXC) is a leading enterprise technology and innovation partner delivering software, services, and solutions to global enterprises and public sector organisations — helping them harness AI to drive outcomes at a time of exponential change with speed. With deep expertise in Managed Infrastructure Services, Application Modernisation, and Industry-Specific Software Solutions, DXC modernises, secures and operates some of the world's most complex technology estates. Learn more on dxc.com.