Security Architect - Software & Application Design

I Confidential; Sheffield; Hybrid; GBP 60,000 - 80,000; Full time

Job summary

A leading financial services firm is seeking a Security Architect/Security Design Engineer to manage end-to-end solution design with their existing teams. This role requires significant experience in software architecture and familiarity with security best practices. Applicants should have experience with CheckPoint, Illumio, and Fortinet, along with strong communication skills to interact with non-technical stakeholders. The role is hybrid, requiring in-office attendance 3 days a week in selected UK cities including Sheffield.

Qualifications

• Significant experience in software architecture.
• Experience in operational and transformation cybersecurity roles.
• Capability to manage technical design authority responsibilities.

Responsibilities

• Manage end-to-end solution design and deliver design documents.
• Architect new features for the web application.
• Provide assurance and support of solutions designs.

Skills

System Design

Data Modelling

API Design

Communication with non-technical SMEs

Experience with CheckPoint, Illumio, Fortinet

Technical leadership

Governance understanding

Tools

Jira

Confluence

BizzDesign

UML Visualisation

Job description

We are currently looking for a Security Architect/Security Design Engineer with experience in Software & Application Design. The role will be joining an existing team with on of our financial services clients.

Applicants will need to attend a client office 3 days per week; location can be a choice of Edinburgh/Sheffield/Birmingham/Manchester.

The role will involve managing end-to-end solution design and delivering design documents in line with functional and non-functional business requirements, strategies, principles, standards, and patterns. Alongside the creation of high-level designs, you will be required to publish new architecture patterns, key decisions, design deviations, and technical risks and issues where appropriate.

Support and maintain the in-house developed web application with an Azure hosted Data Lake backend, used for firewall rule recertification for CheckPoint, Illumio and Fortinet. The role involves architecting new features to incorporate new requirements to support WAF, Network Segmentation and Proxy capabilities. Additionally, assisting with re-platforming the service to a new infrastructure.

Significant experience and proven technical depth and experience within software architecture -

• System Design, design complex systems using architecture patterns.
• Data Modelling, create data models by defining data structures and produce entity relationship diagrams.
• API Design, integrate various systems using robust API frameworks.

Broad background across information technology with the ability to communicate clearly with non-security technical SMEs at a comfortable level.

Experience and understanding of both the roles and interlock between enterprise & solution architecture.

Experience in both operational and transformation cybersecurity roles or a clear working understanding of both perspectives.

Experience working in large-scale IT transformation programmes.

Ability to manage separation of control from technical design authority responsibilities - represent at technical and security design authorities to ensure that solutions are secure.

Experience ensuring compliance with security controls to identify control gaps, develop remediation plans and determine residual risk across both local and national programmes.

Platform & Technology

• Working experience with CheckPoint, Illumio, and/or Fortinet or similar related firewall technology.
• BizzDesign, Archi, or generic UML visualisation experience for high-level designs.
• High proficiency and expertise in Jira for project & tasks management.
• Working proficiency in Confluence for documentation.

Architecture & Design

• Provide assurance, support and oversight of solutions designs and support the engineering teams in delivering and executing strategic technology deployments.
• Ensure solution designs align to published reference architecture.
• Provide technical expertise & consultation to transformative programmes of work within their security domain.
• Influence business and technology executives to help them align their initiatives with standardised offerings whilst also engaging with them to understand their business requirements, threats and risks.
• Clear understanding of both the motivations of the business and technical security.

Governance

• Willingness and ability to present reference architecture to design authorities and articulate deep technical concepts to a broad range of stakeholders in both large forums and smaller deep-dive sessions.
• Ensures all reference architecture, high-level designs, architecture patterns, decision records, deviation requests, and technical risks or issue records undergo architectural and project governance processes.
• Ensure all architecture artefacts undergo appropriate peer review prior to design authority presentation.
• Present publications at technical design authorities for input, feedback, and approval.

Risk and Dependency Management

• Effectively manages and escalates both technical and project risks or issues.
• Articulates solutions and remediation steps to technical risks & issues.
• Ability to map design decisions to resultant technical risks & issues to articulate the cause and rationale which leads to any negatively impacting change.

Security Design Engineers will work with stakeholders including the relevant enterprise architect to ensure design decisions in delivery align to strategic direction.

Security Design Engineers should be comfortable presenting and sharing solutions at design authorities and senior leadership & stakeholders. Additionally, the Security Design Engineers will provide technical thought leadership and direction to their aligned projects and may stand in as subject matter experts and consultants related programmes.

#LI-DNI