Security Architect (London)

hackajob is collaborating with Solirius Reply to connect them with exceptional professionals for this role.

About Us:

Solirius Reply, part of the Reply Group, is a technology consultancy and digital transformation partner that helps organisations solve complex challenges through strategy, design, engineering, and delivery. We work closely with our clients to deliver secure, accessible, user-focused services that evolve with their needs. By combining deep technical expertise with people-centred design, we create solutions that deliver meaningful, lasting impact. Our consultants partner directly with client teams, embedding into organisations to understand their goals, challenges, and users. This collaborative approach enables us to deliver tailored solutions that drive measurable outcomes across public and private sectors. Past and present clients include the Ministry of Justice, Department for Education, Ministry of Housing, Communities and Local Government, UEFA, International Olympic Committee, and Mercedes-Benz. Our services span the full digital delivery lifecycle, including architecture, engineering, delivery management, user-centred design, business analysis, data, DevOps, and AI. We operate as a collaborative and inclusive organisation that empowers our people to take ownership, innovate, and develop their expertise. As an equal opportunities employer, we are committed to encouraging equality, diversity, and social mobility, while creating opportunities for our teams to work on meaningful projects that deliver lasting impact.

About You:

You are a motivated and adaptable professional with a strong analytical mindset and a passion for using technology to solve real-world problems. You enjoy working in collaborative, agile teams and take pride in delivering high-quality solutions that make a tangible impact. With strong communication skills and a consultative approach, you’re comfortable engaging with clients, understanding their needs, and translating them into effective outcomes.

The Role:

We are seeking experienced Security Architects to support our public sector and enterprise clients in delivering secure digital services and technology transformation initiatives. The role involves engaging with multiple stakeholders to understand business objectives, identify security risks, and design security architectures that enable the safe delivery of business outcomes. You will work closely with solution architects, engineering teams, delivery managers, and client leadership to ensure that security is embedded by design and aligned with organisational risk appetites. As a Security Architect, you will operate with a high degree of autonomy, applying your expertise to resolve complex security challenges and providing authoritative guidance across projects and programmes. You will also contribute to the growth of the Security Practice by developing new service offerings, maintaining security standards and artefacts, supporting business development activities, and mentoring junior colleagues. In addition to technical leadership, you will help identify and shape new opportunities by engaging with client stakeholders to understand strategic security objectives and deliver value-driven outcomes. You will be a confident communicator, capable of influencing senior stakeholders, facilitating workshops, and building consensus across multidisciplinary teams.

Requirements

Key Responsibilities:

• Design end-to-end security architectures that align with business, technical, regulatory, and security requirements.
• Develop security strategies and controls for cloud-native, hybrid, and on-premise environments.
• Conduct security architecture reviews and provide recommendations to mitigate identified risks.
• Translate business and technical requirements into secure, scalable, and resilient designs.
• Ensure alignment with enterprise security architecture, governance frameworks, and organisational standards.
• Support Agile delivery teams by embedding security-by-design principles throughout the software development lifecycle.
• Define and document security patterns, reference architectures, and reusable security artefacts.
• Lead threat modelling activities and identify appropriate mitigation strategies.
• Collaborate with stakeholders across business, product, operations, and engineering teams to drive secure decision-making.
• Advise on identity and access management approaches, including authentication, authorisation, and privileged access controls.
• Ensure security, privacy, compliance, and risk management requirements are incorporated into solutions.
• Support security assurance activities, including risk assessments, security testing, and accreditation processes.
• Contribute to DevSecOps initiatives, promoting automation and continuous security practices.
• Produce clear architectural documentation, including security views, high-level designs, and security artefacts.
• Mentor junior team members and contribute to the development of the wider Security Practice.

Key Experience:

• Extensive experience engaging with stakeholders at all levels, including senior leadership and C-suite executives.
• Proven experience operating within client-facing and/or consultancy environments.
• Demonstrated experience designing and implementing enterprise security architectures.
• Strong understanding of security architecture methodologies and frameworks.
• Experience conducting threat modelling and security risk assessments.
• Experience supporting security assurance activities within regulated environments.
• Proven ability to balance security requirements with operational and business objectives.
• Experience designing secure architectures across cloud and hybrid environments.
• Strong understanding of security controls for applications, infrastructure, data, and identity.
• Experience working within Agile delivery environments and integrating security into delivery processes.
• Familiarity with public sector security requirements and accreditation approaches is highly desirable.
• Experience supporting compliance initiatives involving standards and regulatory frameworks.

Key Skills:

• Advanced knowledge of cloud security across Microsoft Azure, AWS, Google Cloud Platform (GCP), and Microsoft 365.
• Expertise in Zero Trust security principles and secure-by-design methodologies.
• Strong understanding of identity and access management technologies, including federation, SSO, MFA, and privileged access management.
• Experience with threat modelling methodologies such as STRIDE, PASTA, or equivalent.
• Knowledge of security frameworks and standards including:
• ISO 27001
• NIST Cybersecurity Framework
• NIST 800-53
• CIS Controls
• SABSA
• TOGAF
• Understanding of security operations concepts, incident response, and detection capabilities.
• Knowledge of application security principles, including secure coding practices and OWASP guidance.
• Experience with DevSecOps practices and security automation.
• Familiarity with container and Kubernetes security.
• Understanding of encryption, key management, and data protection principles.
• Strong documentation, communication, and stakeholder management skills.

Benefits

• Competitive Salary
• Bonus Scheme
• Private Healthcare Insurance
• 25 Days Annual Leave