Security Architect
Posted Today by Experis
£601 Per day
Outside
Hybrid
Bristol
Summary: The Security Architect role involves developing secure architecture designs for container platforms and enhancing security controls across virtualization technologies. The position requires active security clearance and focuses on security assurance, DevSecOps practices, and stakeholder engagement. The role is primarily remote with some on-site work in Bristol and offers a competitive daily rate.
Key Responsibilities:
- Develop secure architecture designs for container platforms (e.g., Kubernetes, OpenShift, Docker).
- Architect and strengthen security controls across virtualization technologies, including VMware, Hyper-V, and cloud-native virtualization frameworks.
- Produce high-quality HLDs/LLDs, security patterns, and architectural governance artefacts.
- Ensure designs align with NCSC guidance, industry best practices (e.g., CIS Benchmarks), and organisational policy.
- Conduct security assessments and threat modelling against containerised and virtualised workloads.
- Validate platform configurations against security baselines, compliance frameworks, and risk appetite.
- Provide expert guidance during project delivery to ensure security by design principles are followed.
- Support accreditation activities and ensure all architectural documentation meets government standards.
- Embed security controls within CI/CD pipelines.
- Advise on secure container image lifecycle management (build, scan, deploy, retire).
- Evaluate and implement tools for container security scanning, runtime protection, and secrets management.
- Define security controls for ingress/egress, service mesh, and inter-container communications.
- Work closely with engineering, infrastructure, and security operations teams.
- Act as SME for containerisation and virtualisation security.
- Communicate complex technical concepts to both technical and non-technical stakeholders.
- Influence and guide senior leadership on architectural decisions and risk.
Key Skills:
- Active SC Clearance (minimum).
- Proven track record as a Security Architect in large-scale or secure environments.
- Deep technical knowledge of Kubernetes, Docker, and container orchestration platforms.
- Virtualisation platforms such as VMware vSphere/ESXi, Hyper-V, or KVM.
- Cloud platforms (AWS, Azure, GCP) and container services (AKS/EKS/GKE).
- Strong understanding of network and infrastructure security, Zero Trust principles, IAM, secrets management, workload isolation, and micro-segmentation.
- Knowledge of security standards and frameworks: NIST, ISO 27001, CIS Benchmarks, NCSC Cloud Security Principles, Government Security Classifications Policy.
Salary (Rate): £600 per day
City: Bristol
Country: United Kingdom
Working Arrangements: hybrid
IR35 Status: outside IR35
Seniority Level: Senior
Industry: IT
Detailed Description From Employer:
Security Architect
2-3 days Bristol then rest remote
6 months likely extension
£600pd outside IR35
Active DV or SC clearance required
Key Responsibilities
Architecture & Design
- Develop secure architecture designs for container platforms (e.g., Kubernetes, OpenShift, Docker).
- Architect and strengthen security controls across virtualisation technologies, including VMware, Hyper?V, and cloud-native virtualisation frameworks.
- Produce high-quality HLDs/LLDs, security patterns, and architectural governance artefacts.
- Ensure designs align with NCSC guidance, industry best practices (e.g., CIS Benchmarks), and organisational policy.
Security Assurance
- Conduct security assessments and threat modelling against containerised and virtualised workloads.
- Validate platform configurations against security baselines, compliance frameworks, and risk appetite.
- Provide expert guidance during project delivery to ensure security by design principles are followed.
- Support accreditation activities and ensure all architectural documentation meets government standards.
DevSecOps & Platform Security
- Embed security controls within CI/CD pipelines.
- Advise on secure container image lifecycle management (build, scan, deploy, retire).
- Evaluate and implement tools for:
- Container security scanning (e.g., Trivy, Aqua, Twistlock)
- Runtime protection and workload isolation
- Secrets and identity management (Vault, KMS, etc.)
- Define security controls for ingress/egress, service mesh, and inter?container communications.
Stakeholder Engagement
- Work closely with engineering, infrastructure, and security operations teams.
- Act as SME for containerisation and virtualisation security.
- Communicate complex technical concepts to both technical and non?technical stakeholders.
- Influence and guide senior leadership on architectural decisions and risk.
Essential Skills & Experience
- Active SC Clearance (minimum).
- Proven track record as a Security Architect in large-scale or secure environments.
- Deep technical knowledge of:
- Kubernetes, Docker, and container orchestration platforms.
- Virtualisation platforms such as VMware vSphere/ESXi, Hyper?V, or KVM.
- Cloud platforms (AWS, Azure, GCP) and container services (AKS/EKS/GKE).
- Strong understanding of:
- Network and infrastructure security
- Zero Trust principles
- Identity and Access Management (IAM)
- Secrets management
- Workload isolation and micro?segmentation
- Knowledge of security standards and frameworks:
- NIST, ISO 27001, CIS Benchmarks
- NCSC Cloud Security Principles
- Government Security Classifications Policy
Desirable Skills
- Experience with OpenShift or enterprise Kubernetes distributions.
- Hands?on security tooling (Falco, Istio, Calico, etc.).
- Experience with SAST/DAST, SBOMs, and software supply chain security.
- Familiarity with automation tooling (Terraform, Ansible, Helm).
- Certifications such as:
- CCSK / CCSP
- CISSP
- CISM
- Kubernetes Security Specialist (CKS)
- VMware security-related certifications
If you receive suspicious outreach claiming to be from us, please contact us via the ManpowerGroup website.