Security Design Architect

Warminster, Wiltshire (hybrid working)

Type: Permanent

Clearance: Must hold security clearance above BPSS. Applicants must be sole British nationals, hold a valid British passport, and be eligible to obtain UK Security Clearance.

Travel: Ability and willingness to travel required

The opportunity: Be part of a high-profile UK defence programme focused on transforming British Army collective training and enabling modern, secure delivery across training and deployed IT environments. This is a mission-led role with real-world impact, working alongside military stakeholders and multi-disciplinary engineering teams.

The role: This Security Architect role requires a versatile individual who can make effective contributions across the full programme lifecycle. The position is critical to successful delivery of the transformation programme, ensuring systems and services meet demanding operational needs. The role concentrates on Information Assurance and Cyber Security, but may also include support to physical and personnel security elements.

Key responsibilities:

• Develop and manage the security vision, architecture specifications, architecture analysis, threat modelling, requirements, standards, design patterns, reference architectures, strategies and roadmaps
• Apply security design principles to produce practical security architectures
• Lead security engagement with senior internal and external stakeholders
• Support security assurance of systems
• Provide strategic direction for security projects to deliver the information security strategy
• Capture, expand and analyse security requirements
• Develop innovative security solutions aligned to long-term architecture goals
• Drive security technology evaluations and proof-of-concepts
• Build strong cross-organisational relationships and influence architecture/stakeholders
• Support security technologies lifecycle management
• Ensure security is embedded across wider technology domain architectures (working with other architects)
• Conduct/assist with peer reviews
• Evaluate and assess security risk throughout application and system lifecycle management
• Stay current with security technologies and recommend adoption based on risk mitigation and business value
• Advise leadership on cybersecurity issues, processes, products and services
• Maintain oversight to ensure appropriate security controls are included in design and implementation
• Act as the cybersecurity SME contributing to overall system architecture

Essential skills:

• Able to work at pace
• Able to articulate complex security concepts to technical and non-technical audiences
• Collaborative team approach; able to constructively challenge
• Able to interpret diverse business and technical requirements and identify viable controls/solutions
• Strong strategic awareness and ability to shape solutions aligned to organisational goals
• Confident communicating risk implications at senior levels
• Strong stakeholder expectation management under high-risk/high-complexity constraints
• Experience leading security design/review activities with architects/engineering teams
• Knowledge of enterprise architecture approaches (e.g., TOGAF, MODAF or equivalent)
• Strong grasp of risk methodologies and security risk management
• Experience supporting Risk Management Framework documents and controls
• Secure by Design understanding/experience
• Understanding of waterfall and agile delivery methodologies
• Understanding of how obsolescence affects Information Assurance
• Broad understanding of cloud hosting/cloud architecture for major providers
• Experience or knowledge of DevSecOps tooling and processes
• Working knowledge of MoD/Government security environments at classifications including SECRET and above
• Proven experience leading a small team
• Willingness to travel
• Security clearance above BPSS (or eligible to obtain)

Desirable:

• Degree in Information Security or significant programme security experience
• Certifications: CISSP, CISM, CRISC, CGRC (any)
• Knowledge of Government Standard 007, ISO 27001 and NIST
• Strong written/oral/presentation skills
• Supply chain security management experience/knowledge
• Experience supporting security awareness/education programmes
• Problem management and/or ITIL experience
• Knowledge of intelligence disciplines and analysis concepts (GEOINT/SIGINT/OSINT/HUMINT etc.)