Cybersecurity Design Lead

Salary: £? - ? per year

Requirements:

• We seek significant technical depth in at least one cybersecurity domain, such as security operations and incident response, threat and vulnerability management, identity and access management, cryptography, infrastructure, network, application, data, or cloud security.
• We require a broad IT background and the ability to communicate clearly with non-security technical subject matter experts.
• We value a strong command of cybersecurity practices, operational risk management, architectural requirements, engineering threats and vulnerabilities, and incident response methodologies.
• We seek an understanding of national and international laws, regulations, policies, and ethics related to cybersecurity in the financial industry.
• We require experience understanding the roles and relationship between enterprise and solution architecture, and operational and transformation cybersecurity perspectives.
• We seek experience working on large-scale IT transformation programmes.
• We value experience working with HashiCorp Vault, preferably on-premises, and using Terraform to design and build complex modules.
• We seek in-depth practical experience integrating Vault, including secret engines and authentication methods, and creating robust, reusable patterns.
• We require experience investigating Vault integration issues, monitoring usage trends, and identifying service efficiencies.
• We value experience designing or implementing workload identity frameworks in large enterprises and defining secrets management strategy.
• We seek knowledge of federated identity management, privileged access management, and authentication protocols such as Kerberos, OAuth, and SAML.
• We require a degree or relevant work experience in cybersecurity, computer science, software engineering, or a related field.
• We prefer CISSP, CISM, or another broadly recognized cybersecurity certification; SABSA or TOGAF certification is also preferred.
• We require high proficiency in Jira and working proficiency in Confluence for documentation and Jira for task management.

Responsibilities:

• We expect you to manage and update end-to-end solution designs in line with reference architecture and business requirements.
• We expect you to create architecture design documents that address functional and non-functional business requirements, strategies, principles, standards, and patterns.
• We expect you to publish architecture patterns, design decision records, options, deviations, technical risks, and issues as appropriate.
• We expect you to translate requirements into solution architecture, ensuring technology and services meet customer needs and expected business outcomes.
• We expect you to ensure solutions are efficient, timely, and cost-effective throughout the project lifecycle.
• We expect you to record and mitigate technical risks and issues, and document and seek approval for design deviations that result in technical debt.
• We expect you to ensure architecture artefacts undergo appropriate peer review and that designs, patterns, decisions, deviations, and risks follow architectural and project governance processes.
• We expect you to present designs and publications to technical design authorities for input, feedback, and approval, and to senior leaders and stakeholders.
• We expect you to provide technical thought leadership and direction to aligned projects, and to serve as a subject matter expert or consultant for related programmes when needed.
• We expect you to promote strong documentation practices and maintain an understanding of business motivations and technical security needs.

Technologies:

• Cloud
• Cryptography
• Confluence
• Support
• JIRA
• Network
• OAuth
• SAML
• Security
• TOGAF
• Terraform

More:

We are recruiting a Design Engineer to manage end-to-end solution design and support aligned projects and related programmes. The role involves working with business requirements and architecture standards, presenting solutions to design authorities and senior stakeholders, and providing technical direction. The source posting provides no company description, benefits, or location details.

last updated 39 week of 2026