Solutions Architect - #2186019

Role Solution Architect

Experience 7 to 11

Location UK,Sheffield

Responsibilities

• Lead the technical design of systems and services within the Cybersecurity Assessment and Testing environment
• Review change requests and solution designs to identify architectural concerns business requirement gaps security risks and control related issues
• Ensure new solutions comply with secure development strategies security architecture standards and control principles
• Develop and maintain architectural artifacts including
• Architecture Impact Assessments
• External Hosting Considerations
• Solution Design Documents
• Design Authority documentation and approvals
• Drive functional nonfunctional technical and architectural requirements aligned with business needs and security strategy
• Support cloud hosting and enterprise architecture governance approvals
• Advise engineering teams on security technologies and assess risks associated with proposed changes
• Define reusable architectural patterns and support quality assurance initiatives
• Guide the integration of cloud and on-premises platforms particularly Kubernetes and GCP environments
• Support architecture across application infrastructure process and service layers
• Ensure effective integration with CI/CD pipelines and SDLC build services
• Collaborate with Engineering Cybersecurity Business Analysis Enterprise Architecture and other cross functional teams
• Influence senior stakeholders and communicate complex architectural decisions clearly
• Support vulnerability management platforms security scanning integrations data pipelines and Kubernetes based services
• Monitor emerging cybersecurity technologies and trends to enhance existing and future solutions

To Be Successful in This Role You Should Have

• Extensive experience in information security and/or IT risk management with a focus on security performance and reliability
• At least 5 years of experience designing and owning application and service architectures
• Strong experience across infrastructure application process and integration architecture layers
• Strong expertise in cloud technologies and integration with on-premises datacentres
• Practical experience with Kubernetes and GCP
• Good understanding of CI/CD pipelines SDLC DevOps and DevSecOps practices
• Experience developing and maintaining functional and nonfunctional requirements with Business Analysts
• Solid knowledge of security protocols cryptography authentication and authorisation
• Strong understanding of current IT risks and experience implementing security solutions
• Experience producing architecture assessments solution designs hosting considerations and governance documentation

Knowledge of vulnerability scanning capabilities including

1. MAST
2. DAST
3. SAST
4. Container scanning
5. Infrastructure as Code scanning
6. FOSSSCA
7. Cloud scanning
8. Infrastructure scanning

• Knowledge of security scanning tools such as Nessus Nexus IQ Checkmarx Netsparker Wiz and Quokka is desirable
• Experience managing large datasets and complex data pipelines
• Strong stakeholder management influencing and communication skills
• Ability to explain and enforce security measures across technical and nontechnical teams
• Strong business acumen and the ability to justify architectural and security decisions

3 Most Important Skills Critical for Success

• Cybersecurity Solution Architecture
• Ability to lead secure application and service architecture assess technical risks produce architectural artefacts and ensure solutions comply with security architecture standards and governance requirements
• Cloud Kubernetes and Hybrid Platform Architecture
• Strong expertise in Kubernetes GCP cloud hosting onpremises datacentre integration CICD pipelines and designing secure services across hybrid environments
• Vulnerability Management and Security Integration
• Understanding of vulnerability scanning capabilities security tools DevSecOps integration large security datasets and complex data pipelines used for vulnerability processing remediation and reporting

Skills

Mandatory Skills : Cybersecurity & AI Laws, Kubernetes

Good to Have Skills : JAVA-CLOUD NATIVE