Security Architect

Salary: £39,000 - 79,000 per year

Requirements:

• We require 3-5 years of experience in enterprise security, cloud architecture, or cyber security roles.
• We require demonstrable experience as a Security Architect, Enterprise Architect, or Principal Consultant.
• We require a strong understanding of Zero Trust Architecture, Secure Architecture Frameworks, Threat Modelling, Security Governance, Risk Management, Security Engineering, and Data Protection.
• We require advanced experience across Microsoft Entra ID, Microsoft Defender Suite, Microsoft Sentinel, Microsoft Purview, Microsoft Intune, Azure Security, and Microsoft 365 Security & Compliance.
• We require deep expertise in authentication, federation, SSO, MFA, PIM, identity governance, directory services, and hybrid identity.
• We require a strong understanding of networking, hybrid infrastructure, Azure Landing Zones, cloud security, cloud-based PKI, infrastructure integration, API security, and security monitoring.
• We require extensive client-facing consultancy experience.
• We require executive stakeholder management, architecture workshop facilitation, and technical leadership across multiple concurrent clients.
• We prefer experience in a managed services environment, security operations integration, exposure and vulnerability management platforms, AI security and governance, multi-cloud security architecture, and secure DevOps / DevSecOps.
• We prefer familiarity with regulatory environments including ISO 27001, NIST CSF, NIS2, Cyber Essentials, GDPR, DORA, and FCA / PRA.
• Preferred certifications include CISSP, CCSP, CISM, SABSA Practitioner, Microsoft SC-100, SC-300, SC-200, AZ-500, and AZ-305.

Responsibilities:

• We act as the lead security architecture authority across assigned Managed Services clients.
• We develop enterprise security strategies, roadmaps, and target-state architectures.
• We produce and govern High-Level Designs, Low-Level Designs, and reference architectures.
• We ensure architectures align with Zero Trust, Security by Design, and Secure by Default principles.
• We conduct architecture reviews and design assurance activities.
• We design and govern enterprise identity strategies across cloud, hybrid, and on-premises environments.
• We lead architecture for Microsoft Entra ID, Active Directory, Identity Governance, Privileged Identity Management, Conditional Access, Authentication Services, Federation, Single Sign-On, and B2B/B2C identity models.
• We define lifecycle management and access governance strategies.
• We architect integrations between Microsoft identity services and third-party platforms.
• We provide architectural ownership across the Microsoft security ecosystem, including Defender, Sentinel, Purview, Security Copilot, Intune, Entra ID Security, Azure Security Services, and Microsoft 365 Security & Compliance.
• We develop security patterns and reference architectures for threat protection, identity protection, data protection, insider risk management, security monitoring, compliance, and AI security.
• We design secure architectures spanning Azure, AWS, Google Cloud, on-premises infrastructure, SaaS platforms, and datacentre environments.
• We lead secure integration of third-party security products, network infrastructure, business applications, identity providers, and security operations tooling.
• We assess technical dependencies and integration risks across complex customer estates.
• We support onboarding of customer environments into managed services.
• We ensure new solutions are operationally supportable.
• We define service acceptance criteria and operational design requirements.
• We work alongside SOC, Managed Identity, Azure, and Infrastructure teams to establish support models.
• We provide technical governance throughout the service lifecycle.
• We act as a trusted advisor to CIO, CTO, CISO, and other technology leadership teams.
• We facilitate architecture workshops and strategy sessions.
• We develop security strategies, maturity roadmaps, and investment plans.
• We present architecture solutions and recommendations to executive and board-level stakeholders.
• We support client security assessments, audits, and transformation programmes.
• We support the creation and evolution of Managed Security Services.
• We define architecture standards, reusable patterns, and technical frameworks.
• We evaluate emerging technologies and services.
• We drive innovation across identity, cloud security, AI security, and automation.

Technologies:

• AI
• API
• AWS
• Active Directory
• Architect
• Azure
• Cloud
• Copilot
• CTO
• DevSecOps
• DevOps
• Support
• Microsoft 365
• Microsoft Intune
• Network
• Security
• Office 365

More:

We are a technology company with people at heart. We empower people to create sustainable value through the clever use of technology. We are one of Microsofts leading partners in the UK, specialising in Azure, Security, Dynamics 365, and Microsoft 365, with a proven track record of delivering transformational IT services. We offer competitive salaries and a hybrid working policy that balances time in the office and from home, with flexibility determined by each team. We are committed to an equitable selection process and may carry out background checks, including a criminal record check, for all offers of employment.

last updated 39 week of 2026