Network Security Architect

We are seeking an experienced Security Solution Designer to work with a financial services client, combining application architecture and network security design in a highly regulated environment.

This role blends application-first architecture with deep understanding of how networks must be designed to securely support and protect applications.

The contract is inside IR35 and we need someone willing to be in the Sheffield office up to 3-days per week.

The Role

You will own and produce reference architecture for application and network security, with a strong focus on network segmentation, application protection, and security controls. Working closely with CTO teams, security architecture, engineering, and regulatory stakeholders, you will ensure solutions are secure, compliant, and fit for purpose from design through to delivery.

You will be comfortable operating at senior level, presenting designs at design authorities, and providing technical thought leadership across multiple programmes.

Essential Experience

• Strong application architecture background (standards, patterns, designs) – must-have
  
  
• Software development background with solid understanding of network architecture and security
  
  
• Experience combining application architecture and network security architecture
  
  
• Financial services experience, ideally within regulated environments (e.g. retail banking, hedge funds, challenger banks)
  
  
• Proven experience producing high-quality architecture documentation (standards, patterns, roadmaps)
  
  
• Strong communication and stakeholder engagement skills, including interaction with regulatory bodies
  
  
• Deep knowledge of security frameworks such as NIST, SANS, ITU
  
  
• Experience with threat modelling, risk assessment, and audit support
  
  Technical Focus
  
  
• Application security, SDLC and lower-environment security
  
  
• Network and application segmentation (including micro-segmentation)
  
  
• Zone-based network design and secure migration from legacy architectures
  
  
• Inter- and intra-zone controls: WAAP, NGFWs, NIPS/NIDS, DDoS, API gateways, reverse proxies, AuthN/AuthZ
  
  Tools and Platforms
  
  
• Legacy and modern networking infrastructure
  
  
• Architecture modelling tools (BizzDesign, Archi, UML)
  
  
• Jira and Confluence
  
  Qualifications (preferred)
  
  
• Degree in Cybersecurity, Computer Science, Software Engineering or similar
  
  
• SABSA, TOGAF, or equivalent architecture certifications
  
  
• Network infrastructure and application security certifications (e.g. CEH)