Telco Security Architect

Capgemini Engineering; Greater London; Hybrid; GBP 80,000 - 100,000; Full time

Job summary

Capgemini Engineering is looking for a security leader to design, implement, and maintain security architectures for telecommunications networks in the UK. The role requires 8–12+ years of experience in network security architecture and knowledge of the UK Telecommunications Security Act (TSA). Candidates will lead high-performing teams and emphasize compliance and risk mitigation.

This position offers hybrid working, primarily with clients along the M4 corridor, requiring occasional travel and a security clearance level.

Qualifications

• 8–12+ years in telecommunications network security architecture.
• Knowledge of UK TSA & regulatory compliance.
• Expertise in telecom network architecture and security requirements.
• 4+ years designing security for Base stations, core, and network management.

Responsibilities

• Design and implement security architectures for telecom networks.
• Ensure compliance with UK TSA and secure network nodes.
• Conduct threat landscape management and risk assessment.
• Lead and deliver security teams.

Skills

Telecommunications network security architecture

UK TSA compliance

Vendor and risk management

Zero-trust design

Cryptographic standards

Security architecture

Education

CISSP certification

ISO 27001 Lead Implementer

Nokia Bell Labs Professional 5G Secured Networks

Job description

Overview

This is a critical security leadership role focused on designing, implementing, and maintaining comprehensive security architectures for telecommunications networks. The role emphasizes UK Telecommunications Security Act (TSA) compliance, network node security, and risk mitigation across complex telecom infrastructures, including secure protocol interfaces and API exposure (HTTPS/SBI, SIP/signaling protocols), and leading high‑performing security teams.

Key Responsibilities

• Design and implement security architectures for telecom networks.
• Ensure UK TSA compliance and secure network nodes.
• Secure protocol interfaces and API exposure.
• Conduct threat landscape management and risk assessment.
• Oversee 5G/6G security initiatives.
• Lead and deliver security teams.

Qualifications

• 8–12+ years in telecommunications network security architecture.
• UK TSA & regulatory compliance knowledge.
• Telecom network architecture expertise.
• Telecom security requirements:
  • Base stations and RAN infrastructure.
  • Core network elements and signaling.
  • Network management and OSS/BSS platforms.
  • Network interfaces and inter‑domain connections.
• 4+ years designing security for: Base stations, core, and network management.
• Expertise in telecom‑specific threats and attacks (SS7 exploitation, signaling attacks, RAN threats).
• Security architecture: zero‑trust design, cryptographic standards, PKI, IAM, SIEM implementation.
• Vendor and risk management experience.

Certifications

• Cyber Architecture: ISC2 CC (free training + certification) → CISSP (requires 5+ years in cyber) → ISSAP (requires CISSP and 2+ years experience).
• Focus on Telecom Cloud:
  • ISC2 CCSP.
  • Nokia Bell Labs Professional 5G Distributed Cloud Network.
• Focus on Telecom Security:
  • Nokia Bell Labs 5G Associate.
  • Nokia Bell Labs Professional 5G Secured Networks.
• Cyber governance, risk and compliance:
  • ISC2 CGRC, CSIM.
  • ISO 27001 Lead Implementer, ISO 27001 Lead Auditor.

Essential Requirements

• All roles require a level of security clearance: BPSS, Security Clearance, or Developed Vetting.
• Location: Permanent role with hybrid working. Clients primarily along the M4 corridor (Newbury, Reading, Slough); occasional travel required.

Equal Employment Opportunity

Capgemini is proud to be a disability‑confident employer (Level 2) under the UK Government’s Disability Confident Scheme. We will offer an interview to all candidates who declare they have a disability and meet the minimum essential criteria for the role.