Lead Technical Architect

A Lead Technical Architect - DV Security Cleared (Developed Vetting) is required by our government client based in Milton Keynes, Bucks commutable from Northampton, East Midlands, Luton, North London – hybrid.

Working in a DV Security Cleared environment. Due to the urgency of the role, DV clearance is required (or eligible).

Essential

Degree or equivalent experience in Computer Science, Network Engineering, or Telecommunications.

TOGAF, ITIL, Agile Project Management, PRINCE2, or equivalent experience.

(CCNP), VMware Certified Professional – Network Virtualisation (VCP-NV), Palo Alto (PCNSE), Microsoft Certified: Azure Network Engineer Associate, AWS Certified Solutions Architect – Associate

designing and governing secure networks using VMware (private cloud), Microsoft on-premise, and multi-cloud (Azure and/or AWS) technologies.

Led scalable, resilient, and cost-efficient LAN, WAN, and hybrid cloud network designs.

Translate business/security requirements into secure, efficient, and cost-effective designs.

reviewing and assuring complex solutions and authored concise and high quality high and low-level designs using the TOGAF framework.

expertise in network automation, provisioning, and orchestration.

leading and managing technical architects

Knowledge:

Knowledge in designing secure or air-gapped platforms within the government sector.

Knowledge of NCSC, GDS, and UK government security frameworks, including Secure by Design, Cloud Security Principles, Government Functional Standards, and the Technology Code of Practice.

Design knowledge of modern practices such as zero trust architecture and network automation.

Designing cloud-native networking within Microsoft Azure/AWS (Azure VNet/AWS VPC).

deep technical knowledge across physical and logical network architectures, including Cisco (ACI, ASA, Firepower (NGFW), ASR, Catalyst, and Nexus), VMware NSX, and Palo Alto Firewalls.

strong understanding of networking protocols and technologies such as VLANs, MPLS, IPsec, OSPF, BGP, SD-WAN, SDN, TCP/IP, ICMP, VPN, DNS, and QoS.

Design knowledge of F5 BIG-IP (LTM, ASM) and experience with monitoring platforms such as SolarWinds and PRTG.

understand the design, configuration, integration, and operation of high-grade encryption devices

Experience:

Designed architectures for secure environments, ideally within government or defence.

Developed and maintained technical roadmaps aligned with organisational strategy.

Evaluated solution options and advised on time, cost, quality, and security trade-offs.

Experience architecting DDoS protection and mitigation alongside firewalls, WAF, IDS/IPS, and EDR/XDR/NDR systems