Security Solution Architect – Network Access Control

I Confidential; Sheffield; Hybrid; GBP 80,000 - 100,000; Full time

Job summary

A leading financial services firm is seeking a Security Solution Architect to design and implement network security solutions. This role involves managing end-to-end solutions and delivering architecture documents that meet various business needs. Candidates should have significant experience in network access control and zero trust design principles. The position is hybrid, requiring 3 days a week in the Sheffield office, making it essential for candidates to have strong communication skills with both technical and non-technical stakeholders.

Qualifications

• Significant experience and proven technical depth in network security and identity management.
• Experience with zero trust network design principles focusing on NAC.
• Broad IT background enabling communication with non-security SMEs.

Responsibilities

• Manage end-to-end solution design for network security.
• Deliver architecture design documents in alignment with business requirements.
• Justify and explain security design decisions against threats and risks.

Skills

Network access control

Network segmentation

Zero trust network design principles

Excellent documentation skills

Integration of identity management solutions

Device security posture assessment

Tools

Jira

Confluence

BizzDesign

Job description

Overview

We are currently looking for a Security Solution Architect to join an existing team with one of our financial services clients. This role is part of the network security architecture function, defining the security requirements and end-to-end solution for global Network Access Control.

Security Solution Architects manage end-to-end solution design and are responsible for delivering architecture design documents in line with functional and non-functional business requirements, strategies, principles, standards, and patterns.

Contract & Working Conditions

Contract will be inside IR35. Role will be on a hybrid working model, 3 days per week in the Sheffield office.

Responsibilities

Security Solution Architects manage end-to-end solution design and are responsible for delivering architecture design documents in line with functional and non-functional business requirements, strategies, principles, standards, and patterns.

Qualifications

• Significant experience and proven technical depth within the following domains – network access control, network segmentation, network security and identity management.
• Significant experience with Zero trust network design principles with NAC as enforcement point.
• Broad background across information technology with the ability to communicate clearly with non-security technical SMEs at a comfortable level.
• Experience working in large-scale IT transformation programmes.
• Excellent documentation skills justifying and explaining security design decisions against threats/mitigation/risk appetite and cost within the solution design document.
• Significant experience and proven technical depth within network security, including:
• Multi-vendor NAC solutions experience (e.g. Forescout, Cisco ISE, ClearPass)
• Agent and agentless NAC approaches
• Integrating user/device identity and access management solutions (e.g. Azure AD, PKI, 802.1X, Radius, TACACS+ and certificate-based authentication)
• Device security posture assessment and management (pre and post admission)
• Network infrastructure and segmentation within hybrid environments (on-premises, Cloud, containerized environments) and network isolation approaches.
• NAC migration and consolidation projects
• Device (corporate, BYoD, IoT) management solutions
• Security assessment and threat modelling as an input to security design.
• Understanding and interpreting regulatory requirements

Platform & Technology

• BizzDesign, Archi, or generic UML visualisation experience for high-level designs
• Working proficiency in Jira for project & tasks management
• Working proficiency in Confluence for documentation