Overview
The Infrastructure Security Architect will play a pivotal role in designing, assuring, and delivering secure infrastructure solutions in a high-assurance environment. This contract position is ideal for an experienced security architect with a robust infrastructure background who can navigate both legacy and modern systems while ensuring compliance with UK security standards. The contractor will collaborate with various engineering and architecture teams to drive security-by-design practices, producing essential documentation and assessments to fortify infrastructure integrity.
Responsibilities
- Own and deliver security architecture for infrastructure solutions including data centres, networks, and cloud services.
- Produce high-quality architecture documentation such as HLD, LLD, and security design packs.
- Lead threat modelling and risk assessments on infrastructure designs, defining mitigations and controls.
- Collaborate with infrastructure engineers and vendors to implement secure architectures.
- Provide assurance through governance forums, ensuring compliance and operational viability.
- Define controls for network segmentation, encryption, and secure administration models.
- Contribute to operational security posture by supporting hardening standards and vulnerability management approaches.
Requirements
- Demonstrable experience as a Security Architect with a deep understanding of Infrastructure Architecture.
- Strong presentation skills, able to produce client-ready architecture artefacts for diverse stakeholders.
- Extensive knowledge of UK security frameworks such as NCSC guidance and HMG Security Policy Framework.
- In-depth understanding of security controls and their application to infrastructure components.
- Ability to balance security, operability, performance, and cost in design decisions.
- Desirable experience in assurance/accreditation activities and knowledge of DevSecOps principles.