Defence Cloud Security Architect – ABAC/IdP Lead (Hybrid)

Sahomelocator; Salisbury; Hybrid; GBP 80,000 - 100,000; Full time

Job summary

A leading consultancy in cyber security is seeking a Cyber Security Architect to support a Defence programme in the UK. This role involves translating NIST controls into practical cloud designs and ensuring adherence to security standards. The successful candidate should possess strong cyber security architecture experience, ideally in Defence or public sector settings, along with knowledge of identity management, cryptography, and an active SC or DV clearance. The position offers hybrid working arrangements with client site time.

Qualifications

• Strong cyber security architecture experience in Defence or complex public sector settings.
• Knowledge across identity, PKI, vulnerability management, SIEM, cryptography and secure configuration.
• Ability to guide teams in an agile environment and work across multiple scrums.
• Active SC or DV clearance.

Responsibilities

• Translate NIST controls into practical cloud design and implementation guidance.
• Lead the design of an ABAC access model using Open Policy Agent.
• Shape an IdP approach that links human identity to ABAC policies.
• Advise on delegation of authority models for security systems.
• Produce clear, concise documentation to support accreditation and engineering teams.

Skills

Cyber security architecture

Agile methodologies

Identity management

PKI and vulnerability management

Cryptography

Job description

A leading consultancy in cyber security is seeking a Cyber Security Architect to support a Defence programme in the UK. This role involves translating NIST controls into practical cloud designs and ensuring adherence to security standards. The successful candidate should possess strong cyber security architecture experience, ideally in Defence or public sector settings, along with knowledge of identity management, cryptography, and an active SC or DV clearance. The position offers hybrid working arrangements with client site time.