Security Architect

CONTEXT

Our client, a major player in its sector, is modernising the way security is designed, monitored, and improved across a set of business-critical technology systems. The organisation operates in a high-trust environment where resilience is not only an IT concern but a condition for market confidence and service continuity. Security must be present from the first architecture sketch to the final production control, which is why this role goes beyond policy writing: it connects secure design, engineering discipline, and operational vigilance.

ACTIVITIES

• Define and maintain security principles, reference architectures, and architecture review practices.
• Advise delivery teams on identity and access management, API security, container security, and Azure cloud security.
• Integrate security controls throughout the software development lifecycle and automate DevSecOps checks.
• Monitor the security posture of technology and application architectures and recommend improvements.
• Support vulnerability management, risk assessment, and remediation planning for critical systems.
• Review designs, challenge assumptions, and provide pragmatic guidance that balances protection and delivery.
• Collaborate with engineering, operations, risk, and compliance stakeholders to keep security aligned with business needs.

EXPECTED ACHIEVEMENTS

The role will create a security architecture that is understandable, repeatable, and embedded in daily engineering work. You will reduce the gap between security policy and technical reality, helping teams ship with fewer blind spots and stronger evidence of control. Expected outcomes include improved design quality, faster identification of vulnerabilities, clearer cloud and identity guardrails, and a measurable increase in security maturity across critical platforms.

ENVIRONMENT

The environment combines modern cloud and application security practices with enterprise governance. You will work with Azure security services, IAM concepts, API and container security, DevSecOps automation, vulnerability management tooling, secure SDLC practices, and architecture review frameworks. The role suits a senior security professional who can move between strategic principles, technical detail, and hands-on guidance for engineering teams.