Security Architect

Location: Warminster, Wiltshire (hybrid working)

Type: Permanent

Clearance: Must hold security clearance above BPSS. Applicants must be sole British nationals, hold a valid British passport, and be eligible to obtain UK Security Clearance. Dual nationals cannot be considered.

Travel: Ability and willingness to travel required

The opportunity

Be part of a high-profile UK defence programme focused on transforming British Army collective training and enabling modern, secure delivery across training and deployed IT environments. This is a mission-led role with real-world impact, working alongside military stakeholders and multi-disciplinary engineering teams.

You'll join a collaborative matrix environment, operating as a senior technical contributor and trusted advisor across the project lifecycle-comfortable working independently when needed and equally effective influencing senior stakeholders.

The role

This Security Architect role requires a versatile individual who can make effective contributions across the full programme lifecycle. The position is critical to successful delivery of the transformation programme, ensuring systems and services meet demanding operational needs.

The role concentrates on Information Assurance and Cyber Security, but may also include support to physical and personnel security elements.

You'll be able to engage both technical experts and wider organisational stakeholders, applying a holistic approach to shape secure solutions that support strategic objectives.

Key responsibilities

Develop and manage the security vision, architecture specifications, architecture analysis, threat modelling, requirements, standards, design patterns, reference architectures, strategies and roadmaps

Apply security design principles to produce practical security architectures

Lead security engagement with senior internal and external stakeholders

Support security assurance of systems

Provide strategic direction for security projects to deliver the information security strategy

Capture, expand and analyse security requirements

Develop innovative security solutions aligned to long-term architecture goals

Drive security technology evaluations and proof-of-concepts

Build strong cross-organisational relationships and influence architecture/stakeholders

Support security technologies lifecycle management

Ensure security is embedded across wider technology domain architectures (working with other architects)

Conduct/assist with peer reviews

Evaluate and assess security risk throughout application and system lifecycle management

Stay current with security technologies and recommend adoption based on risk mitigation and business value

Advise leadership on cybersecurity issues, processes, products and services

Maintain oversight to ensure appropriate security controls are included in design and implementation

Act as the cybersecurity SME contributing to overall system architecture

Essential skills & experience

Self-starter; able to prioritise and plan complex work in a rapidly changing environment

Strong customer/stakeholder engagement skills (internal and external)

Excellent problem-solving and critical thinking

Highly organised, discreet, outcome-focused; able to work at pace

Able to articulate complex security concepts to technical and non-technical audiences

Collaborative team approach; able to constructively challenge

Able to interpret diverse business and technical requirements and identify viable controls/solutions

Strong strategic awareness and ability to shape solutions aligned to organisational goals

Confident communicating risk implications at senior levels

Strong stakeholder expectation management under high-risk/high-complexity constraints

Experience leading security design/review activities with architects/engineering teams

Knowledge of enterprise architecture approaches (e.g., TOGAF, MODAF or equivalent)

Strong grasp of risk methodologies and security risk management

Experience supporting Risk Management Framework documents and controls

Secure by Design understanding/experience

Understanding of waterfall and agile delivery methodologies

Understanding of how obsolescence affects Information Assurance

Broad understanding of cloud hosting/cloud architecture for major providers

Experience or knowledge of DevSecOps tooling and processes

Working knowledge of MoD/Government security environments at classifications including SECRET and above

Proven experience leading a small team

Willingness to travel

Security clearance above BPSS (or eligible to obtain)

Desirable

Degree in Information Security or significant programme security experience

Certifications: CISSP, CISM, CRISC, CGRC (any)

Knowledge of Government Standard 007, ISO 27001 and NIST

Strong written/oral/presentation skills

Supply chain security management experience/knowledge

Experience supporting security awareness/education programmes

Problem management and/or ITIL experience

Knowledge of intelligence disciplines and analysis concepts (GEOINT/SIGINT/OSINT/HUMINT etc.)

Apply / enquire

Apply via this advert or get in touch for a confidential discussion. Applications are being managed through the recruitment partner route