About the job
This is a Fixed Term Appointment opportunity for 47 months with the possibility of permanency dependent on business requirements.
Social Security Scotland currently has an exciting opportunity for an Associate Security Architect to join the Security Architecture Team within the Digital Risk & Security (DRS) Branch, playing a key role in safeguarding critical services, systems and citizen data across the organisation.
As an Associate Security Architect, you will help design and maintain secure architectures across the organisation, with a strong focus on AWS cloud environments. Working closely with delivery teams and stakeholders, you will apply security-by-design principles, ensure compliance with public sector security standards, and integrate security best practices throughout the development lifecycle. This is an exciting opportunity to contribute to the security and resilience of a national public service that supports people across Scotland.
Job description
Responsibilities
Design and review system architectures using recognised security patterns and Secure by Design principles and AWS well-architected security best practices.
Recommend appropriate security controls aligned with organisational and government standards.
Provide specialist security guidance to multidisciplinary delivery teams across design, build, and implementation phases, including cloud-native solutions hosted on AWS.
Assess security risks, communicate implications, and advise risk owners on tolerances and mitigation.
Maintain and evolve security documentation, patterns, and architectural artefacts.
Promote security culture and ensure Secure by Design is understood and applied across programmes.
Define, implement, and review AWS security controls and guardrails, including identity and access management, encryption, logging, monitoring, and network security capabilities.
Person specification
Success Profiles
We use an assessment framework called ?
Success Profiles? which lists the elements we test and provides detailed descriptions of each. Find out more about the framework here.
For this post, the following Success Profile elements will be assessed:
Experience:
Demonstrable experience designing and implementing secure architectures across AWS cloud, hybrid and on-premises environments, applying recognised architectural patterns and producing clear security documentation. This should include experience applying AWS security principles and controls.
Knowledge of government-relevant security standards and frameworks, with the ability to apply these requirements within AWS environments support delivery teams in making secure design and implementation decisions.
Strong understanding of emerging threats, vulnerabilities and attacker techniques across AWS cloud, hybrid, and on-premises environment, with the ability to assess and communicate technical risks and security concepts effectively to both technical and non-technical stakeholders.
Benefits
Annual Leave - You will receive 25 days annual leave on joining us. This will increase to 30 days after four full years of service. You will also have 11.5 public and privilege days of leave every year. We also offer Flexi-time. Any extra hours you've worked can be taken as leave when suitable.
A Civil Service Pension - This job comes with a Civil Service pension. New joiners to the Civil Service will join a career average pension scheme as standard.
Healthy work life balance - We can offer the possibility of full-time, part-time, term-time, and job shares. We also encourage flexible working.
Discounts - You can enjoy a vast range of retail, travel and lifestyle discounts through our benefit scheme.
Personal support for you - Our Employee Assistance Programme gives you confidential, independent information and guidance 24/7.
Volunteering special leave - Up to six days paid special leave a year for volunteering. We support our staff to help causes important to them.
Great locations - Our bright and modern offices in the heart of Dundee and Glasgow have been designed with staff in mind. Both locations are ideal for public transport.
Things you need to know
Artificial intelligence can be a useful tool to support your application, however, all examples and statements provided must be truthful, factually accurate and taken directly from your own experience. Where plagiarism has been identified (presenting the ideas and experiences of others, or generated by artificial intelligence, as your own) applications may be withdrawn and internal candidates may be subject to disciplinary action. Please see our candidate guidance for more information on appropriate and inappropriate use.
Selection process details
Expected Timeline (subject to change)
Sift - w/c 2nd November
Interview ? w/c 30th November
Location - In Person in either Dundee or Glasgow
Nationality requirements
This job is broadly open to the following groups:
UK nationals
nationals of the Republic of Ireland
nationals of Commonwealth countries who have the right to work in the UK
nationals of the EU, Switzerland, Norway, Iceland or Liechtenstein and family members of those nationalities with settled or pre-settled status under the European Union Settlement Scheme (EUSS)
nationals of the EU, Switzerland, Norway, Iceland or Liechtenstein and family members of those nationalities who have made a valid application for settled or pre-settled status under the European Union Settlement Scheme (EUSS)
individuals with limited leave to remain or indefinite leave to remain who were eligible to apply for EUSS on or before 31 December 2020
Turkish nationals, and certain family members of Turkish nationals, who have accrued the right to work in the Civil Service
Working for the Civil Service
The Civil Service Code sets out the standards of behaviour expected of civil servants.
We recruit by merit on the basis of fair and open competition, as outlined in the Civil Service Commission's recruitment principles. The Civil Service embraces diversity and promotes equal opportunities. As such, we run a Disability Confident Scheme (DCS) for candidates with disabilities who meet the minimum selection criteria.