Lead Security Architect

About the role

SiXworks is seeking a Lead Security Architect to drive secure delivery of internal and MOD projects. You will work with agile technical teams to design and implement Kubernetes‑based environments, ensuring that security and risk management meet Defence and National Security standards.

Key responsibilities

• Lead risk management activities for Defence and Security sector projects, applying frameworks such as NIST 800‑53.
• Develop and deliver security architectures that align with the Government Security Classification (GSC) of systems.
• Collaborate with IT architects, SMEs, and cross‑functional teams (Software Engineering, DevSecOps, Infrastructure, Agile, Cyber Security) to integrate security solutions.
• Produce evidence and documentation required for MOD regulations and assurance artefacts (e.g., JSP 604, JSP 453).
• Design mitigation options for identified vulnerabilities across cloud and on‑premise infrastructures.
• Support secure‑by‑design development practices and create security policies, risk assessments, test plans, and evaluation reports.

Required profile

• Proven experience in risk management using industry‑approved methodologies (e.g., NIST 800‑53).
• Ability to work at a technical level with agile teams and guide secure design decisions.
• Familiarity with Defence or MOD environments and related regulatory requirements.
• Willingness to hold or obtain UK government security clearance and meet residency criteria.

Required skills

• Kubernetes
• Risk management (NIST 800‑53)
• Security architecture design
• Cloud security components (network, endpoints, cryptography, authentication, authorisation, data inspection)
• DevSecOps practices
• JSP 604 and JSP 453 assurance artefacts
• Security documentation (policies, risk assessments, test plans)