Security Architect

Security Architect (Defence DevSecOps & AI/ML)
Portsmouth/ Hybrid (3 days onsite)
645 per day Inside IR35
5-Month Contract
Active SC or DV Clearance Required

Are you an experienced Security Architect looking to shape the future of secure AI and cloud technologies within the UK Defence sector?

We are looking for a Security Architect to join a high-profile defence programme, leading the design and assurance of secure AI/ML solutions across multi-cloud and edge environments. This is an opportunity to play a key role in delivering innovative capabilities while ensuring security is embedded throughout the programme lifecycle.

You'll work alongside senior technical leaders, architects and engineering teams to define security strategy, influence governance and enable secure DevSecOps practices across a complex, mission-critical environment.

• Leading the security architecture across AI/ML development and trial programmes.
• Driving the Secure by Design approach throughout project delivery.
• Owning the end-to-end security assurance process.
• Designing secure multi-cloud and edge architectures aligned with Defence requirements.
• Defining trust boundaries, classification-aware architectures and secure cross-domain data controls.
• Developing the security roadmap covering DevSecOps, policy-as-code and secure CI/CD pipelines.
• Leading software supply chain security, including SBOMs, artefact signing and software provenance.
• Conducting threat modelling and security risk assessments.
• Chairing security working groups and collaborating with multinational stakeholders.
• Engaging with senior leadership to communicate security risks, assurance activities and programme outcomes.
• Mentoring junior security professionals and promoting security best practice across delivery teams.

• Proven experience as a Security Architect within complex enterprise or Defence environments.
• Strong background in cloud security architecture across multi-cloud and edge platforms.
• Experience implementing Secure by Design principles and DevSecOps practices.
• Expertise in:
  • Threat modelling and risk management
  • Policy-as-Code
  • CI/CD security controls
  • Software Supply Chain Security
  • SBOMs, artefact signing and software provenance
• Excellent stakeholder management and communication skills.
• Previous experience working within UK Defence or other highly regulated environments.
• Experience leading technical security governance forums.

• Active SC or DV Clearance.
• Sole UK National.
• CISSP (or equivalent security certification).
• TOGAF (or equivalent architecture certification).
• Previous experience supporting Defence programmes.