Security Solutions Architect

We are currently looking for a Security Architect to join an existing team with one of our financial services clients. This requires specific experience in CNAPP platforms.

The role will be managing the end-to-end solution design and delivering architecture design documents in line with functional and non-functional business requirements, strategies, principles, standards, and patterns.

Alongside the creation of high-level designs, the role will involve publishing new architecture patterns, key decisions, design deviations, and technical risks and issues where appropriate.

• Experience in CNAPP platforms such as Wiz, Prisma Cloud, Orca, Lacework, or Aqua Security and their capabilities across CSPM, CWPP, CIEM, DSPM and KSPM.
• Strong knowledge of public cloud platforms.
• Experience with container technologies and orchestration platforms including securing workloads and cluster configurations.
• Strong understanding of Infrastructure as Code (IaC) tools.
• Expertise in CI/CD pipeline integration, including embedding security controls into development toolkits.
• Ability to conduct threat modelling, risk assessment, and design secure architectures for cloud-native applications and workloads.
• Familiarity with runtime protection and workload scanning for VMs, containers, and serverless using CNAPP or CWPP features.
• Experience with identity and access management in the cloud, including least privilege design, CIEM tools, and federated identity models.
• Experience designing cloud-native security reference architectures, patterns, and reusable templates for development and platform teams.
• Familiarity with compliance frameworks and security benchmarks, including CIS, NIST, ISO 27001, and how they apply to cloud-native applications.

• Excellent communication and collaboration skills, with the ability to influence cross-functional teams and translate technical concepts to business stakeholders.
• Proactive, solution-oriented mindset with strong problem-solving abilities, a strategic approach to cloud security architecture, and a passion for continuous improvement.
• Uses compelling arguments to gain the support and commitment of others; stepping up to address difficult issues and saying what needs to be said.
• Ability to operate effectively even when things are not certain, or the way forward is not clear; holds self and others accountable to meet commitments.
• Ability to apply knowledge of business and the market to making good and timely decisions that keeps the organization moving forward.

Platform & Technology:

• BizzDesign, Archi, or generic UML visualisation experience for high-level designs.
• Working proficiency in Jira for project & tasks management.
• Working proficiency in Confluence for documentation.

Architecture & Design:

• Produce, manage, and update end-to-end solution designs in line with reference architecture & business requirements.
• Articulate and publish key design decision records and options to ensure all solutions follow a logical, transparent decision-making process.
• Articulate, publish, and ensure approval of any design deviations resulting in technical debt
• Ensure any technical risks or issues arising from a solution design are recorded and mitigated.
• Produces, manages and translates the requirements into the architecture for that solution, ensuring technology and services meet the customer needs and expected business outcomes.
• Ensures the design of the solutions are efficient, timely and cost effective throughout the project lifecycle.
• Clear understanding of both the motivations of the business and technical security.
• Promote strong documentation and clerkship.
• Governance:
• Ensures all high-level designs, architecture patterns, decision records, deviation requests, and technical risks or issue records undergo architectural and project governance processes.
• Ensure all architecture artefacts undergo appropriate peer review prior to design authority presentation.
• Present publications at technical design authorities for input, feedback, and approval.

Contract will be inside IR35, applicants must be based in the UK.