Security Architect

Location: Remote with occasional travel to Manchester

Rate: £600 per day

IR35 Status: Inside IR35

Clearance: SC Mandatory

Overview

We are seeking a Security Architect (SFIA Level 4) to join a public sector transformation programme, working predominantly remotely with occasional travel to Manchester. The successful candidate will design and assure secure architectures across a mixed technology estate, embedding secure-by-design principles into new and existing systems. Working closely with enterprise architects, delivery teams and security assurance leads, you will translate policy and risk requirements into practical architectural patterns. This is an excellent opportunity for an experienced Security Architect to shape security outcomes on a high-profile public sector programme.

Key Responsibilities

Design and document security architectures, patterns and blueprints for new and existing systems

Conduct risk assessments and threat modelling to identify and mitigate security vulnerabilities

Embed secure-by-design principles across the solution life cycle, working with enterprise and solution architects

Review technical designs for security compliance and provide sign-off against organisational policy

Design and assure encryption and key management architecture across AWS environments, including AWS KMS and database encryption at rest and in transit

Support accreditation activity, ITHC remediation and audit responses

Produce clear architectural documentation (HLD/LLD, security patterns) for technical and non-technical stakeholders

Engage with delivery teams, technical leads and business stakeholders to align security requirements with delivery timelines

Ensure alignment with NCSC guidance, ISO 27001 and relevant government security standards

Essential Skills

Strong commercial experience working as a Security Architect at SFIA Level 4 or equivalent

Proven track record producing security architecture documentation, patterns and design assurance artefacts

Hands-on experience securing AWS environments, including AWS KMS and encryption key management

Strong experience designing and implementing database encryption strategies (at rest and in...