Security Architect

In this role you will design and assure secure systems for internal and customer-facing solutions, embedding security by design across platforms. You will collaborate with architects, engineers, and the cyber security team to assess risks and support accreditation activities. The role combines hands-on security design with governance and stakeholder engagement in regulated environments. You will influence security decisions through threat modelling, risk assessments, and guidance throughout delivery and bids. This is a meaningful opportunity to shape secure public-sector software systems.

• Above-average pension scheme
• Private medical cover for employees (option to add family)
• 25 days holiday (+Buy/Sell option)
• Life assurance (4x basic salary)
• Group Pension Plan with employer contributions up to 8.5%
• Flexible benefits package to suit individual needs`,`LinkedIn Learning access for all colleagues

• Produce security architecture designs aligned with the architecture framework for internal and customer systems
• Conduct threat modelling and risk assessments to identify and manage security risks
• Create security assurance documentation for governance, customer assurance, and accreditation activities
• Collaborate with Technical and Enterprise Architects to ensure secure-by-default solutions
• Engage with the cyber security team to assess emerging threats and advise remediation
• Provide security guidance to delivery teams, including hands-on support when needed
• Present security designs and risk positions to the Technical Assurance Board and support decision-making
• Contribute to bids and security questionnaires by providing architecture input
• Support evaluation and controlled adoption of new security technologies
• Continuously develop skills in line with evolving threats, technologies, and standards

• Practical experience designing and assuring secure systems
• Strong understanding of security principles, non-functional requirements, and risk management
• Confidence engaging with stakeholders across engineering, architecture, and governance
• Experience in regulated or public-sector environments is a plus
• Familiarity with ISO 27001, NCSC Cyber Essentials, NIST, or CIS is desirable

• Stakeholder engagement
• Clear communication
• Collaborative mindset
• Security architecture and design
• Threat modelling and risk assessment
• Security governance, assurance, and accreditation support