Security Architect

Salary: £55,000 - 95,000 per year

Requirements:

• We are seeking experienced Security Architects with extensive experience engaging stakeholders at all levels, including senior leadership and C-suite executives.
• We want proven experience working in client-facing and/or consultancy environments.
• We need demonstrable experience designing and implementing enterprise security architectures.
• We require strong understanding of security architecture methodologies and frameworks.
• We look for experience conducting threat modelling and security risk assessments.
• We value experience supporting security assurance activities within regulated environments.
• We expect the ability to balance security requirements with operational and business objectives.
• We need experience designing secure architectures across cloud and hybrid environments.
• We require strong understanding of security controls for applications, infrastructure, data, and identity.
• We want experience working within Agile delivery environments and integrating security into delivery processes.
• Familiarity with public sector security requirements and accreditation approaches is highly desirable.
• Experience supporting compliance initiatives involving standards and regulatory frameworks is required.
• Advanced knowledge of cloud security across Microsoft Azure, AWS, Google Cloud Platform, and Microsoft 365 is required.
• Expertise in Zero Trust security principles and secure-by-design methodologies is required.
• Strong understanding of identity and access management technologies, including federation, SSO, MFA, and privileged access management is required.
• Experience with threat modelling methodologies such as STRIDE, PASTA, or equivalent is required.
• Knowledge of security frameworks and standards including ISO 27001, NIST Cybersecurity Framework, NIST 800-53, CIS Controls, SABSA, and TOGAF is required.
• Understanding of security operations concepts, incident response, and detection capabilities is required.
• Knowledge of application security principles, including secure coding practices and OWASP guidance, is required.
• Experience with DevSecOps practices and security automation is required.
• Familiarity with container and Kubernetes security is required.
• Understanding of encryption, key management, and data protection principles is required.
• Strong documentation, communication, and stakeholder management skills are required.

Responsibilities:

• Design end-to-end security architectures that align with business, technical, regulatory, and security requirements.
• Develop security strategies and controls for cloud-native, hybrid, and on-premise environments.
• Conduct security architecture reviews and provide recommendations to mitigate identified risks.
• Translate business and technical requirements into secure, scalable, and resilient designs.
• Ensure alignment with enterprise security architecture, governance frameworks, and organisational standards.
• Support Agile delivery teams by embedding security-by-design principles throughout the software development lifecycle.
• Define and document security patterns, reference architectures, and reusable security artefacts.
• Lead threat modelling activities and identify appropriate mitigation strategies.
• Collaborate with stakeholders across business, product, operations, and engineering teams to drive secure decision-making.
• Advise on identity and access management approaches, including authentication, authorisation, and privileged access controls.
• Ensure security, privacy, compliance, and risk management requirements are incorporated into solutions.
• Support security assurance activities, including risk assessments, security testing, and accreditation processes.
• Contribute to DevSecOps initiatives, promoting automation and continuous security practices.
• Produce clear architectural documentation, including security views, high-level designs, and security artefacts.
• Mentor junior team members and contribute to the development of the wider Security Practice.
• Contribute to the growth of the Security Practice by developing new service offerings, maintaining security standards and artefacts, supporting business development activities, and mentoring junior colleagues.
• Engage with client stakeholders to understand strategic security objectives and identify new opportunities.

Technologies:

• AI
• AWS
• Azure
• Cloud
• DevSecOps
• DevOps
• Support
• Kubernetes
• Microsoft 365
• OWASP
• Security
• TOGAF
• Office 365
• Architect
• Embedded
• GCP

More:

We are Solirius Reply, part of the Reply Group, a technology consultancy and digital transformation partner helping organisations solve complex challenges through strategy, design, engineering, and delivery. We work closely with clients to deliver secure, accessible, user-focused services across public and private sectors, with past and present clients including the Ministry of Justice, Department for Education, Ministry of Housing, Communities and Local Government, UEFA, the International Olympic Committee, and Mercedes-Benz. Our services span the full digital delivery lifecycle, including architecture, engineering, delivery management, user-centred design, business analysis, data, DevOps, and AI. We operate as a collaborative and inclusive organisation that empowers our people to take ownership, innovate, and develop their expertise. We offer competitive salary, bonus scheme, private healthcare insurance, 25 days annual leave plus bank holidays, up to 10 days allocated for development training per year, enhanced parental leave, paid fertility leave, pension, EAP with Help@Hand, gym membership benefits, cycle to work and electric vehicle schemes, flexible working, and annual away days/company socials. We are committed to equality, diversity, social mobility, mental health and wellbeing, and providing an accessible and inclusive recruitment process for all candidates.

last updated 34 week of 2026