Cyber Security Domain Architect

This position is listed on behalf of a partner company, who manages all applications and next steps. Our partner is looking for a Cyber Security Domain Architect based in United Kingdom.

• Design, evaluate, and maintain enterprise security architectures covering cloud, infrastructure, identity, networking, and data environments.
• Develop current-state and target-state security architectures, ensuring alignment with enterprise security principles, business objectives, and regulatory requirements.
• Define and maintain security standards, controls, reference architectures, and multi-year Security Domain roadmaps.
• Provide technical leadership across Azure and VMware Cloud Foundation (VCF) environments, including cloud security, VMware security, identity, and infrastructure protection.
• Design and strengthen security capabilities covering Microsoft Entra ID/IAM, Zero Trust, defense-in-depth, network segmentation, micro-segmentation, data protection, and encryption.
• Guide the implementation and governance of Microsoft security technologies, including Microsoft Defender for Cloud, Endpoint, and Identity.
• Facilitate security roadmap workshops with technical and business stakeholders, build alignment, and secure approval for proposed architectural directions.
• Support the implementation of approved security roadmaps and track business, risk, compliance, and operational outcomes.
• Conduct security architecture reviews, gap assessments, risk analyses, and evaluations of existing and proposed technology solutions.
• Develop Architecture Decision Records (ADRs) and Architecture Review Board (ARB) documentation.
• Evaluate emerging cybersecurity technologies and recommend appropriate solutions, architectural alternatives, and mitigation strategies.
• Advise senior and executive stakeholders on security risks, priorities, architectural trade-offs, and remediation approaches.
• Contribute to threat detection, incident response, and broader security resilience initiatives.

• Minimum 3 years of professional experience as a Security Architect or in a closely related cybersecurity architecture role.
• Bachelor's degree in Computer Science, Engineering, Cybersecurity, or a related discipline.
• Strong expertise in cybersecurity, enterprise security architecture, and security solution design.
• Proven experience designing and implementing Azure Security Architecture and Azure-native security controls and cloud governance.
• Strong knowledge of Microsoft Entra ID and Identity & Access Management (IAM).
• Experience with VMware Cloud Foundation (VCF) and VMware security architecture.
• Solid understanding of network segmentation, micro-segmentation, Zero Trust, and defense-in-depth security models.
• Hands-on knowledge of Microsoft Defender for Cloud, Defender for Endpoint, and Defender for Identity.
• Strong understanding of security governance, risk and compliance, data protection, encryption, threat detection, and incident response.
• Experience developing security strategies, standards, controls, reference architectures, and multi-year security roadmaps.
• Ability to perform current-state and target-state architecture assessments, gap analyses, and security architecture reviews.
• Experience preparing Architecture Decision Records (ADRs) and supporting Architecture Review Boards (ARBs).
• Strong ability to communicate complex cybersecurity concepts and provide trusted advice to senior and executive stakeholders.
• Experience working with healthcare or public-sector security and compliance frameworks is highly valuable.
• Relevant professional certification such as CISSP, CISM, Azure Security Engineer Associate, or Azure Solutions Architect Expert is required or strongly preferred.

• Fully remote working environment, providing flexibility in where you work.
• Opportunity to influence enterprise-wide cybersecurity strategy and architecture.
• Broad technical exposure across Azure, VMware Cloud Foundation, identity, cloud security, infrastructure, and data protection.
• Opportunity to work on complex security transformation initiatives involving Zero Trust, segmentation, threat detection, and modern cloud security.
• High level of ownership and visibility when advising senior and executive stakeholders.
• Exposure to strategic security roadmaps, architecture governance, emerging technologies, and enterprise risk management.