£700 Per day
Outside
Onsite
Basingstoke
Summary: The role of MOD DV Cleared Network Security Architect involves supporting a high-profile government program by delivering secure and resilient enterprise capabilities. The position requires a strong background in network and infrastructure security, with responsibilities including developing security architectures and ensuring compliance with MOD and government standards. The successful candidate must have active MOD DV clearance and will work full-time onsite in Basingstoke. This is a pivotal role that demands expertise in translating security requirements into technical designs.
Key Responsibilities:
- Develop and own High-Level Security Designs (HLDs) for complex network and infrastructure solutions.
- Define end-to-end security architectures supporting programme objectives and operational requirements.
- Produce and maintain security design documentation, architectural artefacts and technical decision records.
- Conduct security control mapping against applicable frameworks and standards.
- Translate business, operational and security requirements into pragmatic technical solutions.
- Work closely with infrastructure, network, delivery and security teams to ensure secure-by-design principles are embedded throughout delivery.
- Review existing environments and identify architectural improvements, risks and remediation activities.
- Support design governance activities including technical reviews, risk assessments and design authorities.
- Provide security guidance throughout the project lifecycle, from concept through to implementation.
- Liaise with stakeholders across engineering, programme management and customer teams to ensure alignment of security objectives.
- Contribute to accreditation and assurance activities where required.
Key Skills:
- Proven experience operating as a Security Architect or Network Security Architect within secure government or defence environments.
- Strong understanding of secure architectural principles and secure-by-design methodologies.
- Demonstrable experience producing High-Level Designs (HLDs), security design documentation, architectural decision records, and technical standards and guidance.
- Hands-on experience conducting control mapping against recognised security frameworks.
- Ability to interpret security requirements and demonstrate how technical controls satisfy them.
- Experience supporting assurance, governance and accreditation activities.
- Familiarity with NIST 800-53, NCSC guidance, MOD security policies, JSP 440 principles, and Defence assurance processes.
- Knowledge of TCP/IP, routing and switching, VLANs, firewalls, IDS/IPS technologies, VPN technologies, and Zero Trust networking concepts.
Salary (Rate): £700 per day
City: Basingstoke
Country: United Kingdom
Working Arrangements: on-site
IR35 Status: outside IR35
Seniority Level: Senior
Industry: IT
MOD DV Cleared Network Security Architect
Location: Basingstoke, Hampshire (Full-time onsite)
Contract: 12-Month Rolling Contract
Rate: £600-£700 per day (Outside IR35)
Clearance: Active UK MOD DV Clearance Required
The Opportunity
We are seeking an experienced MOD DV Cleared Network Security Architect to support a high-profile government programme delivering secure and resilient enterprise capabilities within a highly regulated environment.
This is an excellent opportunity for an architect with a strong background across both network and infrastructure security domains, capable of translating security requirements into robust technical designs. The successful candidate will play a pivotal role in developing security architectures, producing High-Level Designs (HLDs), conducting control mapping activities, and ensuring solutions align with MOD and government security standards.
Due to the nature of the programme, this role requires full-time onsite presence in Basingstoke and an active MOD DV clearance.
Key Responsibilities
- Develop and own High-Level Security Designs (HLDs) for complex network and infrastructure solutions.
- Define end-to-end security architectures supporting programme objectives and operational requirements.
- Produce and maintain security design documentation, architectural artefacts and technical decision records.
- Conduct security control mapping against applicable frameworks and standards.
- Translate business, operational and security requirements into pragmatic technical solutions.
- Work closely with infrastructure, network, delivery and security teams to ensure secure-by-design principles are embedded throughout delivery.
- Review existing environments and identify architectural improvements, risks and remediation activities.
- Support design governance activities including technical reviews, risk assessments and design authorities.
- Provide security guidance throughout the project lifecycle, from concept through to implementation.
- Liaise with stakeholders across engineering, programme management and customer teams to ensure alignment of security objectives.
- Contribute to accreditation and assurance activities where required.
Essential Skills & Experience
Security Architecture
- Proven experience operating as a Security Architect or Network Security Architect within secure government or defence environments.
- Strong understanding of secure architectural principles and secure-by-design methodologies.
- Demonstrable experience producing:
- High-Level Designs (HLDs)
- Security design documentation
- Architectural decision records
- Technical standards and guidance
Control Mapping & Assurance
- Hands-on experience conducting control mapping against recognised security frameworks.
- Ability to interpret security requirements and demonstrate how technical controls satisfy them.
- Experience supporting assurance, governance and accreditation activities.
- Familiarity with:
- NIST 800-53
- NCSC guidance
- MOD security policies
- JSP 440 principles
- Defence assurance processes
Network Security
- TCP/IP, routing and switching
- VLANs and segmentation
- Firewalls and security zoning
- IDS/IPS technologies
- VPN technologies
- Load balancing concepts
- Proxy technologies
- Network Access Control (NAC)
- Secure remote access
- DNS and DHCP services
- Zero Trust networking concepts