Security Architect - Consultant / Senior Consultant

Level: Consultant / Senior Consultant
Locations: London, Bristol, Manchester or Cambridge
Working model: Hybrid - typically a minimum of 2 days per week from an office or client site
Employment: Permanent

A major UK consultancy is significantly expanding its Security Architecture capability and is looking to hire multiple Security Architects across Consultant and Senior Consultant level.

This is part of a wider investment into the capability, with 10+ hires planned, creating opportunities for both established Security Architects and strong Security Consultants or Engineers who already have genuine architecture/design experience and want to develop into broader Security Architecture positions.

You will work across major transformation programmes for both public and private sector clients, helping organisations design, develop and deliver secure technology solutions.

Rather than focusing purely on governance, assurance or BAU security, the role provides the opportunity to work directly with clients and technical teams to shape security from requirements and early-stage design through to delivery.

• Designing and shaping security solutions across complex technology transformation programmes.
• Translating business and security requirements into practical security architectures and technical designs.
• Working across areas such as cloud, infrastructure, networks, integration, applications and enterprise security.
• Producing and reviewing security architecture and design documentation.
• Conducting threat modelling and identifying security risks within proposed solutions.
• Applying Secure by Design principles throughout the technology lifecycle.
• Working closely with Solution Architects, Engineers, delivery teams and senior client stakeholders.
• Reviewing existing architectures and recommending improvements or alternative approaches.
• Using recognised security frameworks and architecture methodologies to support design decisions.
• Helping clients balance security requirements with wider technical and business objectives.

You do not necessarily need to currently hold the title of Security Architect.

The team is interested in established Security Architects as well as Security Consultants, Security Engineers and other technical security professionals who have already gained meaningful architecture or solution-design experience.

Relevant experience could include:

• Security Architecture or security solution design.
• Designing or reviewing HLDs/LLDs and technical architectures.
• Threat modelling and Secure by Design.
• Cloud security across AWS, Azure and/or GCP.
• Security architecture across infrastructure, networks, applications or integration environments.
• Large-scale infrastructure, cloud or technology transformation programmes.
• Working as part of a wider Architecture or Design team.
• Taking technical or business requirements and helping turn them into secure solutions.
• Client-facing consulting and stakeholder management.

Certifications or knowledge of frameworks such as CISSP, CISM, SABSA, TOGAF, NIST or CIISec/CCP would be beneficial.

Candidates must be capable of obtaining the appropriate UK security clearance.

Some assignments involve UK Government and Defence clients and may require higher levels of National Security Vetting. Candidates should therefore have the appropriate UK residency and right-to-work history to meet the relevant clearance requirements.

This is particularly suited to someone who wants to build a broader career in Security Architecture rather than remain tied to one technology or narrow security specialism.

With a significant number of hires being made, you would be joining during a period of genuine capability growth, with the opportunity to work across different clients, sectors and technologies while developing your architecture experience.

The consultancy works across both public and private sector transformation programmes, providing exposure to complex environments and the opportunity to influence security design rather than simply inherit and operate existing solutions.