Security Architect
Solirius Reply3 months ago
London, United KingdomSenior
Responsibilities
- Design end-to-end security architectures aligned with business, technical, regulatory, and security requirements.
- Develop security strategies and controls for cloud-native, hybrid, and on-premise environments.
- Conduct security architecture reviews, threat modelling, risk assessments, and security assurance activities.
- Translate business and technical requirements into secure, scalable, and resilient designs.
- Define security patterns, reference architectures, security views, high-level designs, and reusable security artefacts.
- Embed security-by-design principles and DevSecOps practices across Agile delivery and software development lifecycles.
- Advise on identity and access management, authentication, authorisation, federation, SSO, MFA, and privileged access controls.
- Collaborate with business, product, operations, engineering, delivery, and client leadership stakeholders.
- Ensure privacy, compliance, risk management, and accreditation requirements are incorporated into solutions.
- Mentor junior colleagues and contribute to Security Practice development, service offerings, standards, business development, and client opportunities.
Requirements
- Extensive experience engaging stakeholders at all levels, including senior leadership and C-suite executives.
- Proven experience in client-facing or consultancy environments and enterprise security architecture design and implementation.
- Experience with security architecture methodologies, threat modelling, security risk assessments, and assurance activities in regulated environments.
- Experience designing secure architectures across cloud and hybrid environments and balancing security requirements with operational and business objectives.
- Strong understanding of security controls for applications, infrastructure, data, and identity.
- Advanced cloud security knowledge across Microsoft Azure, AWS, Google Cloud Platform, and Microsoft 365.
- Expertise in Zero Trust security principles, secure-by-design methodologies, identity and access management, and privileged access management.
- Knowledge of threat modelling methods such as STRIDE and PASTA, plus security frameworks and standards including ISO 27001, NIST Cybersecurity Framework, NIST 800-53, CIS Controls, SABSA, and TOGAF.
- Understanding of security operations, incident response, detection capabilities, application security, secure coding, and OWASP guidance.
- Experience with DevSecOps, security automation, container and Kubernetes security, encryption, key management, and data protection.
- Familiarity with public sector security requirements and accreditation approaches is highly desirable.
- Strong documentation, communication, facilitation, influencing, and stakeholder management skills.
Benefits
- Competitive salary and bonus scheme.
- Private healthcare insurance, contributory pension, and EAP with Help@Hand.
- 25 days annual leave plus bank holidays.
- Up to 10 days of development training per year.
- Enhanced parental leave and five days of paid fertility leave.
- Gym membership benefits, flexible benefits allowance, Cycle to Work scheme, and Electric Vehicle scheme.
- Flexible working; the position is advertised as hybrid.
- Annual away days and company socials.
Tech Stack
Categories