Cyber Security Enterprise Architect in London

Job Title: Cyber Security Enterprise Architect
Job Description This role focuses on defining and maintaining an enterprise-wide cyber security architecture, with particular emphasis on Identity and Access Management (IAM) and Privileged Access Management (PAM). You will shape the current and future security landscape, create and review solution designs, and provide technical direction to ensure that all security solutions align with the organisation's cyber security strategy and roadmap. Responsibilities Define, document and maintain an enterprise-wide view of cyber security architecture, including the current (as-is) state, target state and a clear, phased architecture roadmap.
Review solution designs from a cyber security perspective and provide technical direction to ensure alignment with the overarching cyber security strategy.
Create conceptual designs for security solutions based on a strong understanding of business problems and requirements.
Produce high-level and low-level designs for security solutions in the absence of a dedicated security technical specialist within IT.
Act in a governance role from a security perspective for projects, ensuring that security requirements and standards are consistently applied.
Work closely with cyber security teams to determine technology direction and deliver stable, performant platforms that support critical applications and services.
Define and communicate the architectural roadmap for the cyber security domain, ensuring that business needs are met and investments are directed to the most appropriate technologies.
Create or contribute to an IAM/PAM strategy and support or lead the implementation of Identity and Access Management solutions, including Identity Governance and Administration (IGA) tools.
Apply deep technical knowledge across threat intelligence, detection and response, IAM, secrets management and security information and event monitoring across both IT and operational technology environments.
Operate effectively in an enterprise environment, collaborating with stakeholders across multiple functions and levels.
Contribute to technology initiatives related to cloud-native application protection (CNAPP), exposure management, external attack management, vulnerability management, threat detection and IAM/PAM.
Essential Skills Demonstrable experience defining and maintaining an enterprise-wide cyber security architecture, including as-is, target state and architectural roadmaps.
Proven experience as a security architect reviewing solution designs and providing technical direction to ensure alignment with a cyber security strategy.
experience creating conceptual security solution designs based on business requirements.
experience working at an enterprise level within complex organisational environments.
experience creating an IAM/PAM strategy and involvement in implementing Identity and Access Management solutions.
Ability to work on site 2–3 days per week.
One or more advanced professional certifications in cyber security.
TOGAF qualification.
Additional Skills & Qualifications experience producing high-level designs (HLDs) and low-level designs (LLDs) for security solutions.
experience acting in a security governance role for project delivery.
Deep technical knowledge across a broad technology landscape, ideally at expert level, including threat intelligence, detection and response, IAM, secrets management and security information and event monitoring across IT and operational environments.
Previous experience working in a regulated business environment.
experience with cloud-native application protection platforms (CNAPP).
experience with exposure management and cyber attack surface management, including external attack management and vulnerability management.
experience implementing Identity Governance and Administration (IGA) tools.
Why Work Here? You will join a technology-driven organisation that is investing in modern cyber security capabilities and architecture. You will have the opportunity to shape strategic security direction, work with advanced tools and platforms, and influence major programmes such as large-scale delivery initiatives. The culture supports collaboration between enterprise architecture and security teams, providing a platform to share expertise, develop professionally and contribute to meaningful, long-term security improvements. Work Environment The role is based in a modern enterprise environment, with an expectation of being on site 2–3 days per week and working flexibly for the remainder. You will collaborate closely with cyber security and architecture teams, engaging with technologies that support threat intelligence, detection and response, IAM, PAM, secrets management, security information and event monitoring, cloud-native application protection, exposure management and vulnerability management. The environment combines both IT and operational technology contexts, offering exposure to critical platforms and services. Dress code and day-to-day working practices are aligned with a professional office setting. Location West Midlands, UK
Trading as TEKsystems. Allegis Group Limited, Maxis 2, Western Road, Bracknell, RG12 1RT, United Kingdom. No. . Allegis Group Limited operates as an Employment Business and Employment Agency as set out in the Conduct of Employment Agencies and Employment Businesses Regulations 2003. TEKsystems is a company within the Allegis Group network of companies (collectively referred to as "Allegis Group"). Aerotek, Aston Carter, EASi, Talentis Solutions, TEKsystems, Stamford Consultants and The Stamford Group are Allegis Group brands. If you apply, your personal data will be processed as described in the Allegis Group Online Privacy Notice available at access our Online Privacy Notice, which explains what information we may collect, use, share, and store about you, and describes your rights and choices about this, please go to are part of a global network of companies and as a result, the personal data you provide will be shared within Allegis Group and transferred and processed outside the UK, Switzerland and European Economic Area subject to the protections described in the Allegis Group Online Privacy Notice. We store personal data in the UK, EEA, Switzerland and the USA. If you would like to exercise your privacy rights, please visit the "Contacting Us" section of our Online Privacy Notice at for details on how to contact us. To protect your privacy and security, we may take steps to verify your identity, such as a password and user ID if there is an