Junior Architect - AWS Security Architect in Manchester

The Security Architect is a senior technical leadership role responsible for defining, governing and evolving secure enterprise architectures across Advania's Managed Services client base. The role provides strategic and technical leadership across identity, security, cloud, infrastructure, networking, data protection and operational security domains, with a particular focus on Microsoft technologies including Entra ID, Defender, Sentinel, Purview, Azure and Microsoft 365.

Hybrid working
We recognise the benefits that remote and flexible working brings. We operate a hybrid working policy that allows our employees to balance time in the office and time from home. Each team within our organisation can decide how to implement this policy.

Key Responsibilities

• Security Architecture Leadership
  Act as the lead security architecture authority across assigned Managed Services clients. Develop enterprise security strategies, roadmaps and target-state architectures. Ensure architectures align with Zero Trust, Security by Design and Secure by Default principles.
• Identity & Access Management Architecture
  Design and govern enterprise identity strategies across cloud, hybrid and on-premises environments. Define lifecycle management and access governance strategies. Architect integrations between Microsoft identity services and third-party platforms.
• Microsoft Security Architecture
  Provide architectural ownership across the Microsoft security ecosystem. Develop security patterns and reference architectures for threat protection, identity protection, data protection, insider risk management, security monitoring, and compliance.
• Third-party security products
  Assess technical dependencies and integration risks across complex customer estates. Provide technical governance throughout the service lifecycle. Develop security strategies, maturity roadmaps and investment plans. Present architecture solutions and recommendations to executive and board-level stakeholders.
• Service Development
  Support the creation and evolution of Managed Security Services. Drive innovation across identity, cloud security, AI security and automation.

What Success Looks Like
Structural review of 10 clients, understand posture, contract, roadmaps and major risks. Develop reusable patterns covering Entra ID, Purview, and Defender for Cloud. Support at least 5 qualified opportunities.

Qualifications & Experience

• Minimum 3-5 years' experience in enterprise security, cloud architecture or cyber security roles.
• Demonstrable experience operating as a Security Architect, Enterprise Architect or Principal Consultant.
• Deep expertise in authentication, federation, SSO, MFA, PIM, identity governance, and directory services.
• Strong understanding of security operations integration, AI security and governance, multi-cloud security architecture, and regulatory environments.

Certifications Preferred
CISSP, CCSP, CISM, SABSA Practitioner, Microsoft SC-100 Cybersecurity Architect Expert, SC-300 Identity & Access Administrator, SC-200 Security Operations Analyst, AZ-500 Azure Security Engineer, AZ-305 Azure Solutions Architect.

Success Measures
Trusted architecture authority across assigned clients. Security architectures successfully deployed into operational managed services. Increased adoption of Microsoft security technologies. Improved client security maturity and resilience.

We are committed to ensuring an equitable experience for all candidates, regardless of race, religion or belief, ethnic or national origin, disability, age, citizenship, marital, domestic or civil partnership status, sexual orientation, gender identity, or any other basis as protected by applicable law. As part of our commitment to our clients we will need to carry out background checks, including a criminal record check, for all offers of employment.