Security Architect

Security Architect

Posted 4 days ago by Experis

Apply
£601 Per day
Outside
Hybrid
Bristol
Apply
Ansible Automation AWS Identity And Access Management (IAM) AWS Key Management Service (KMS) Azure Kubernetes Service Certified Cloud Security Professional (CCSP) Certified Information Security Manager (CISM) Certified Information Systems Security Professional (CISSP) Cloud Computing Cloud Technology Containerisation Container Security Continuous Integration and Continuous Delivery Design Elements And Principles Docker (Software) Google Cloud Platform (GCP) Hyper-V Identity And Access Management Istio Kubernetes Lifecycle Management Management Microsoft Azure OpenShift Security Clearance Security Patterns Stakeholder Management Threat Modeling Virtualisation Virtualisation Security VMware Certified Associate Windows Server Virtualisation

Summary: The Security Architect role involves designing secure architecture for container platforms and strengthening security controls across virtualization technologies. The position requires active DV or SC clearance and entails a mix of on-site work in Bristol and remote work. The contract is for 6 months with a likely extension, offering a competitive daily rate.

Key Responsibilities:

  • Develop secure architecture designs for container platforms (e.g., Kubernetes, OpenShift, Docker).
  • Architect and strengthen security controls across virtualization technologies, including VMware, Hyper-V, and cloud-native virtualization frameworks.
  • Produce high-quality HLDs/LLDs, security patterns, and architectural governance artifacts.
  • Ensure designs align with NCSC guidance, industry best practices (e.g., CIS Benchmarks), and organizational policy.
  • Conduct security assessments and threat modeling against containerized and virtualized workloads.
  • Validate platform configurations against security baselines, compliance frameworks, and risk appetite.
  • Provide expert guidance during project delivery to ensure security by design principles are followed.
  • Support accreditation activities and ensure all architectural documentation meets government standards.
  • Embed security controls within CI/CD pipelines.
  • Advise on secure container image lifecycle management (build, scan, deploy, retire).
  • Evaluate and implement tools for container security scanning, runtime protection, and workload isolation.
  • Define security controls for ingress/egress, service mesh, and inter-container communications.
  • Work closely with engineering, infrastructure, and security operations teams.
  • Act as SME for containerization and virtualization security.
  • Communicate complex technical concepts to both technical and non-technical stakeholders.
  • Influence and guide senior leadership on architectural decisions and risk.

Key Skills:

  • Active SC Clearance (minimum).
  • Proven track record as a Security Architect in large-scale or secure environments.
  • Deep technical knowledge of Kubernetes, Docker, and container orchestration platforms.
  • Virtualization platforms such as VMware vSphere/ESXi, Hyper-V, or KVM.
  • Cloud platforms (AWS, Azure, GCP) and container services (AKS/EKS/GKE).
  • Strong understanding of network and infrastructure security, Zero Trust principles, IAM, and secrets management.
  • Knowledge of security standards and frameworks: NIST, ISO 27001, CIS Benchmarks, NCSC Cloud Security Principles, Government Security Classifications Policy.
  • Experience with OpenShift or enterprise Kubernetes distributions.
  • Hands-on security tooling (Falco, Istio, Calico, etc.).
  • Experience with SAST/DAST, SBOMs, and software supply chain security.
  • Familiarity with automation tooling (Terraform, Ansible, Helm).
  • Certifications such as CCSK / CCSP, CISSP, CISM, Kubernetes Security Specialist (CKS), VMware security-related certifications.

Salary (Rate): £600/day

City: Bristol

Country: United Kingdom

Working Arrangements: hybrid

IR35 Status: outside IR35

Seniority Level: Senior

Industry: IT

Detailed Description From Employer:

Security Architect 2-3 days Bristol then rest remote 6 months likely extension £600pd outside IR35 Active DV or SC clearance required

Key Responsibilities

  • Architecture & Design
  • Develop secure architecture designs for container platforms (e.g., Kubernetes, OpenShift, Docker).
  • Architect and strengthen security controls across virtualisation technologies, including VMware, Hyper?V, and cloud-native virtualisation frameworks.
  • Produce high-quality HLDs/LLDs, security patterns, and architectural governance artefacts.
  • Ensure designs align with NCSC guidance, industry best practices (e.g., CIS Benchmarks), and organisational policy.
  • Security Assurance
  • Conduct security assessments and threat modelling against containerised and virtualised workloads.
  • Validate platform configurations against security baselines, compliance frameworks, and risk appetite.
  • Provide expert guidance during project delivery to ensure security by design principles are followed.
  • Support accreditation activities and ensure all architectural documentation meets government standards.
  • DevSecOps & Platform Security
  • Embed security controls within CI/CD pipelines.
  • Advise on secure container image lifecycle management (build, scan, deploy, retire).
  • Evaluate and implement tools for: Container security scanning (e.g., Trivy, Aqua, Twistlock)
  • Runtime protection and workload isolation
  • Secrets and identity management (Vault, KMS, etc.)
  • Define security controls for ingress/egress, service mesh, and inter?container communications.
  • Stakeholder Engagement
  • Work closely with engineering, infrastructure, and security operations teams.
  • Act as SME for containerisation and virtualisation security.
  • Communicate complex technical concepts to both technical and non?technical stakeholders.
  • Influence and guide senior leadership on architectural decisions and risk.

Essential Skills & Experience

  • Active SC Clearance (minimum).
  • Proven track record as a Security Architect in large-scale or secure environments.
  • Deep technical knowledge of: Kubernetes, Docker, and container orchestration platforms.
  • Virtualisation platforms such as VMware vSphere/ESXi, Hyper?V, or KVM.
  • Cloud platforms (AWS, Azure, GCP) and container services (AKS/EKS/GKE).
  • Strong understanding of: Network and infrastructure security
  • Zero Trust principles
  • Identity and Access Management (IAM)
  • Secrets management
  • Workload isolation and micro?segmentation
  • Knowledge of security standards and frameworks: NIST, ISO 27001, CIS Benchmarks
  • NCSC Cloud Security Principles
  • Government Security Classifications Policy

Desirable Skills

  • Experience with OpenShift or enterprise Kubernetes distributions.
  • Hands?on security tooling (Falco, Istio, Calico, etc.).
  • Experience with SAST/DAST, SBOMs, and software supply chain security.
  • Familiarity with automation tooling (Terraform, Ansible, Helm).
  • Certifications such as: CCSK / CCSP
  • CISSP
  • CISM
  • Kubernetes Security Specialist (CKS)
  • VMware security-related certifications

If you receive suspicious outreach claiming to be from us, please contact us via the ManpowerGroup website.

Apply
Similar Jobs
Loading data...