Security Architect (UKSV)

Job summary

As an SEO Security Architect, you will provide guidance to technical teams, enabling them to make risk-informed design decisions across services, infrastructure, and platforms. Operating at the Practitioner level within the Government Digital and Data Framework, you will balance security requirements with delivery needs, applying NCSC principles and "Secure by Design" guardrails.

Please note that all roles with UK Security Vetting are reserved posts and therefore open to UK nationals only. For full information on Eligibility, please refer to the attached Job Pack.

Job description

You will work closely with Delivery Managers, Technical Architects, Software Engineers, and Information Risk Owners to design systems that are resilient to compromise, easy to monitor, and proportionate in their security controls.

Example of tasks performed within the role:

• Support the design, documentation and review of secure multi-cloud and hybrid architectures
• Participate in structured threat modeling and architecture risk assessments across cloud and on-prem workloads
• Maintain and evolve security architecture artefacts while tracking emerging cloud security capabilities
• Assist in configuring and monitoring cloud security posture, vulnerability management and telemetry tools
• Provide architectural guidance and control recommendations in response to internal cybersecurity inquiries
• Report to Lead Security Architect and expect to grow into architectural ownership with mentorship

Person specification

As a Security Architect within UK Security Vetting, we are looking for people who have the following expertise and attributes:

• Personally taking responsibility for delivering a timely, high quality and cost effective service with focus and energy.
• Ability to empower and make changes that add value, with a strong focus on improved outcomes and performance by encouraging innovation, giving people the space to take initiative in flexible interdependent communities.
• Be visible, accessible, you communicate confidently and provide clear direction reflecting genuine care for colleagues.
• Demonstrate positive customer service outcomes by understanding the complexity and diversity of customer needs and expectations.
• Have the ability to establish and maintain strong relationships at all levels in the organisation, working collaboratively across teams, engaging and building trust to generate commitment to goals.
• Have an interest in looking for flaws in the way systems are used, built and maintained and the identification of mitigation opportunities.

Essential:

• Security Architecture Principles: Proven experience applying secure design patterns, Zero Trust concepts, and protective security controls to cloud (Oracle/AWS/Azure/GCP) or hybrid infrastructure.
• Enabling Risk-Based Decisions: Ability to evaluate vulnerabilities, articulate risk impact clearly, and recommend cost-effective, proportionate mitigations.
• Technical Knowledge: Strong grounding in core infrastructure and application security, including identity management (IAM), network security, cryptography, containerisation, and CI/CD pipelines.
• Standards & Frameworks: Familiarity with UK Civil Service and national cyber security frameworks (NCSC Design Principles, GovAssure / Cyber Assessment Framework, Secure by Design).
• Communication: Strong interpersonal skills with the ability to influence delivery teams, challenge non-secure practices pragmatically, and explain technical risks to non-technical partners.
• Hands-on experience with security solutions (e.g. EDR/AV, MDM, patch management and endpoint hardening).
• A strong understanding of how vulnerabilities occur and how they are exploited.

Desirable:

• Similar architecture experience in public sector.
• Experience of legacy migration and re-platforming of digital services.
• Interest in forming government best practices, standards and policies.
• Experience in managing commercial suppliers to deliver digital services.
• Experience with Oracle Cloud Infrastructure (OCI).
• Experience with Vulnerability Management and Remediation.
• Knowledge of network security tools (e.g. SIEM, IDS/IPS and SD-WAN).

Additional information:

Cabinet Office policy is that a minimum 60% of your working time should be spent at your principal workplace. For some roles, due to their nature and the business need, this may be up to 100%. Requirements to attend other locations for official business will also count towards this level of attendance.

Behaviours

We'll assess you against these behaviours during the selection process:

• Changing and Improving
• Making Effective Decisions

We only ask for evidence of these behaviours on your application form:

• Changing and Improving

Technical skills

We'll assess you against these technical skills during the selection process:

• Analysis, Communication (Security Architect), Designing Secure Systems, Enabling and informing risk-based decisions, Research and Innovation, Security Technology, Understanding security implications of transformation

Benefits

Alongside your salary of £45,292, Cabinet Office contributes £13,121 towards you being a member of the Civil Service Defined Benefit Pension scheme. Find out what benefits a Civil Service Pension provides (opens in a new window).

• Learning and development tailored to your role.
• An environment with flexible working options.
• A culture encouraging inclusion and diversity.
• A Civil Service Pension which provides an attractive pension, benefits for dependants and employer contributions of 28.97%.
• A minimum of 25 days of paid annual leave, increasing by one day per year up to a maximum of 30.

Things you need to know

Artificial intelligence

Artificial intelligence can be a useful tool to support your application, however, all examples and statements provided must be truthful, factually accurate and taken directly from your own experience. Where plagiarism has been identified (presenting the ideas and experiences of others, or generated by artificial intelligence, as your own) applications may be withdrawn and internal candidates may be subject to disciplinary action. Please see our candidate guidance (opens in a new window) for more information on appropriate and inappropriate use.

Selection process details

This vacancy is using Success Profiles (opens in a new window), and will assess your Behaviours, Experience and Technical skills.

Application process

At the sift stage you will be assessed on the Behaviours and Experience elements of the Success Profiles.

You will be asked to provide a 250-word statement on the Behaviour Changing and Improving.

To assess experience you will be asked to provide a 750-word personal statement and a name-blind (anonymous) CV.

Please provide a personal statement of no more than 750 words. It should explain a summary of your skills and achievements to show that you have the relevant experienc