Security Architect

Security Architect 2-3 days Bristol then rest remote 6 months likely extension £600pd outside IR35 Active DV or SC clearance required Key Responsibilities Architecture & Design Develop secure architecture designs for container platforms (e.g., Kubernetes, OpenShift, Docker). Architect and strengthen security controls across virtualisation technologies, including VMware, Hyper?V, and cloud-native virtualisation frameworks. Produce high-quality HLDs/LLDs, security patterns, and architectural governance artefacts. Ensure designs align with NCSC guidance, industry best practices (e.g., CIS Benchmarks), and organisational policy.Security Assurance Conduct security assessments and threat modelling against containerised and virtualised workloads. Validate platform configurations against security baselines, compliance frameworks, and risk appetite. Provide expert guidance during project delivery to ensure security by design principles are followed. Support accreditation activities and ensure all architectural documentation meets government standards.DevSecOps & Platform Security Embed security controls within CI/CD pipelines. Advise on secure container image lifecycle management (build, scan, deploy, retire). Evaluate and implement tools for: Container security scanning (e.g., Trivy, Aqua, Twistlock) Runtime protection and workload isolation Secrets and identity management (Vault, KMS, etc.) Define security controls for ingress/egress, service mesh, and inter?container communications.Stakeholder Engagement Work closely with engineering, infrastructure, and security operations teams. Act as SME for containerisation and virtualisation security. Communicate complex technical concepts to both technical and non?technical stakeholders. Influence and guide senior leadership on architectural decisions and risk.Essential Skills & Experience Active SC Clearance (minimum). Proven track record as a Security Architect in large-scale or secure environments. Deep technical knowledge of: Kubernetes, Docker, and container orchestration platforms. Virtualisation platforms such as VMware vSphere/ESXi, Hyper?V, or KVM. Cloud platforms (AWS, Azure, GCP) and container services (AKS/EKS/GKE). Strong understanding of: Network and infrastructure security Zero Trust principles Identity and Access Management (IAM) Secrets management Workload isolation and micro?segmentation Knowledge of security standards and frameworks: NIST, ISO 27001, CIS Benchmarks NCSC Cloud Security Principles Government Security Classifications PolicyDesirable Skills Experience with OpenShift or enterprise Kubernetes distributions. Hands?on security tooling (Falco, Istio, Calico, etc.). Experience with SAST/DAST, SBOMs, and software supply chain security. Familiarity with automation tooling (Terraform, Ansible, Helm). Certifications such as: CCSK / CCSP CISSP CISM Kubernetes Security Specialist (CKS) VMware security-related certificationsIf you receive suspicious outreach claiming to be from us, please contact us via the ManpowerGroup website