At a Glance
- Tasks: Lead the design of secure architecture for cloud-native systems and collaborate with engineering teams.
- Company: Join a top-tier pension management firm transforming its technology and security landscape.
- Benefits: Enjoy a competitive salary package and hybrid working options for better work-life balance.
- Why this job: Shape the security architecture of a firm safeguarding over £65 billion in assets.
- Qualifications: 6+ years in Security Engineering or Architecture, with expertise in AWS/Azure and IaC.
- Other info: Ideal for those passionate about secure development practices in a highly regulated environment.
The predicted salary is between 138000 - 230000 £ per year.
We are partnering with a market-defining pensions investment firm undertaking a large-scale transformation of its technology and security landscape. Backed by strong executive sponsorship, they’re redesigning core architecture, building cloud-native systems, and investing in a high-trust, hands-on security function to future-proof operations. This is a unique opportunity to shape the security architecture of a business responsible for safeguarding over £65 billion in assets - where your input won’t sit on the shelf, but will be built, deployed, and relied upon.
Key Responsibilities
- Lead the design and development of secure architecture patterns across cloud-native infrastructure (AWS/Azure), serverless systems, and distributed environments.
- Collaborate closely with engineering and product teams to evaluate architecture proposals, reduce risk, and embed intuitive security controls across the SDLC.
- Perform security-focused architecture reviews of key platforms and workflows, guiding engineering teams through the development phase with secure-by-design advice.
- Translate complex threats into architectural controls and reusable policy-as-code modules that prevent risk before it materialises.
- Support cloud security strategy through templates, IaC modules, and proactive risk reduction initiatives.
- Advocate for secure development practices - from CI/CD pipelines to containerised workloads - ensuring that friction is addressed with empathy and practical value.
- Apply threat modelling frameworks to uncover vulnerabilities and recommend architecture-level mitigation strategies.
- Work directly with developers and infrastructure teams to align real-world engineering goals with enterprise security objectives.
What You Bring...
- 6+ years’ experience in Security Engineering, Software Engineering, or Security Architecture roles.
- Proven track record of designing secure systems within cloud-native environments (AWS or Azure).
- Comfortable developing IaC (Terraform or similar), automating security controls, and contributing to secure infrastructure practices.
- Strong understanding of modern security principles, threat actor behaviour, and risk frameworks (NIST preferred).
- Skilled in collaborating with developers to find practical, low-friction ways to implement secure patterns.
- Confident communicator across technical and non-technical teams, with the ability to influence architecture-level decisions.
- Deep familiarity with secure development tooling, infrastructure design, and threat modelling practices.
- Background in highly regulated environments such as financial services, insurance, or pensions.
- (Preferred) Degree in a related field and/or certifications such as CISSP, CISM, or equivalent.
- (Preferred) Experience contributing to architectural governance, documentation, and change control in scaled organisations.
Seniority level: Mid-Senior level
Employment type: Full-time
Job function: Information Technology and Engineering
Industries: Financial Services, Capital Markets, and Investment Management
Experienced Security Architect | Professional Pension Management Firm employer: Job Traffic
Contact Detail:
Job Traffic Recruiting Team
StudySmarter Expert Advice 🤫
We think this is how you could land Experienced Security Architect | Professional Pension Management Firm
✨Tip Number 1
Familiarise yourself with the specific cloud platforms mentioned in the job description, such as AWS and Azure. Having hands-on experience or relevant certifications can significantly boost your credibility during discussions.
✨Tip Number 2
Prepare to discuss your previous experiences in designing secure systems, especially in cloud-native environments. Be ready to share specific examples of how you've implemented security controls and reduced risks in past projects.
✨Tip Number 3
Brush up on modern security principles and threat modelling frameworks like NIST. Being able to articulate these concepts clearly will demonstrate your expertise and understanding of the security landscape.
✨Tip Number 4
Showcase your collaboration skills by preparing examples of how you've worked with both technical and non-technical teams. Highlighting your ability to influence architecture decisions will be key in this role.
We think you need these skills to ace Experienced Security Architect | Professional Pension Management Firm
Some tips for your application 🫡
Tailor Your CV: Make sure your CV highlights relevant experience in Security Engineering, Software Engineering, or Security Architecture. Emphasise your familiarity with cloud-native environments like AWS or Azure and any specific projects that showcase your skills.
Craft a Compelling Cover Letter: In your cover letter, express your passion for security architecture and how your background aligns with the company's mission. Mention specific achievements that demonstrate your ability to design secure systems and collaborate effectively with teams.
Showcase Relevant Skills: Clearly outline your technical skills related to IaC (like Terraform), threat modelling, and secure development practices. Use examples to illustrate how you've applied these skills in previous roles, particularly in regulated environments.
Prepare for Technical Questions: Anticipate technical questions related to security principles, risk frameworks, and architectural governance. Be ready to discuss your approach to mitigating vulnerabilities and implementing security controls in real-world scenarios.
How to prepare for a job interview at Job Traffic
✨Showcase Your Technical Expertise
Be prepared to discuss your experience with cloud-native environments, particularly AWS and Azure. Highlight specific projects where you designed secure systems and how you implemented security controls in those environments.
✨Demonstrate Collaboration Skills
Since the role involves working closely with engineering and product teams, share examples of how you've successfully collaborated with developers to embed security into the software development lifecycle. Emphasise your ability to communicate complex security concepts in an understandable way.
✨Prepare for Scenario-Based Questions
Expect questions that assess your problem-solving skills in real-world scenarios. Be ready to explain how you would approach threat modelling or risk assessment in a given situation, and what architectural controls you would recommend.
✨Highlight Your Understanding of Regulatory Environments
Given the firm's focus on financial services and pensions, demonstrate your knowledge of compliance and regulatory requirements. Discuss any relevant experience you have in highly regulated environments and how it informs your security architecture decisions.