Security Architect

Security Architect – Cross-Domain & Secure Information Exchange – Remote (South of England)

Location: Remote-first (South of England), with travel to customer sites and occasional head office visits

Job type: Permanent, Full-time

Salary: £75,000 – £85,000 + benefits

An established UK cyber security specialist is hiring a Security Architect to design the security behind systems that move sensitive data between networks of different classification levels. The work spans R&D, product development and live defence programmes. If you’d rather be designing trust boundaries and data flows than reviewing someone else’s control set, this is worth a look.

About the role

The business builds secure information exchange technology for defence, government and CNI customers, and its work runs from early research through to deployed capability. You’ll start on a defence programme moving from research into operational capability. From there, you’ll shape security across the wider portfolio and other customer work.

You’ll sit with engineers, Solution Architects and other Secure by Design specialists, in a team that values technical depth and a low-ego, collaborative approach. This is a design role. You’ll be the person working out how security should work as a capability moves from prototype to production.

What you’ll be doing

• Designing security architectures for cross-domain and secure data exchange solutions, including trust boundaries, data flows and policy enforcement points
• Building security into products and capabilities from R&D and MVP stages through to operational deployment
• Threat modelling and turning risk into practical engineering requirements
• Working with engineers on prototypes and design decisions, across on-premise, cloud and containerised deployments
• Reviewing designs for weaknesses and control gaps, and explaining decisions to primes and assurance authorities
• Contributing security input to bids and to the direction of future products

What you’ll bring

• Hands-on security architecture experience, designing controls into complex technical systems rather than only assessing them
• Experience in R&D, product development or capability development, ideally taking something from prototype to production
• Strong technical depth across Zero Trust, IAM/PAM, network security, cryptography and key management
• A solid understanding of Secure by Design principles, applied in defence or similarly high-assurance environments
• A collaborative, low-ego way of working
• SC clearance, or eligibility and willingness to undergo UK security vetting

Nice to have

• Direct experience of cross-domain solutions, data guards, one-way transfer or content inspection
• Familiarity with NCSC guidance and Def Stan 05-138
• CISSP, SABSA, NCSC Certified Professional or CCSP

What’s on offer

• R&D and product work on secure data exchange, alongside live defence programmes
• Remote-first working, with flexible hours around core hours of 10am to 4.30pm
• 25 days’ holiday plus bank holidays, with the option to buy or sell up to 5 days a year
• 6% employer pension contribution
• Private medical insurance, group income protection and life assurance at 2x salary

If you’re a technically minded security architect who enjoys hard design problems in secure data exchange, we’d welcome a confidential conversation. Applause IT is managing this search on behalf of the client.

Applause IT Recruitment is acting as an Employment Agency in relation to this vacancy.