Security Systems Architect

KEY RESPONSIBILITIES:
• Define and implement server security requirements, including baseline configurations, hardening standards, and compliance controls
• Lead network device hardening activities (e.g. firewalls, routers, switches), ensuring alignment with security policies and best practices
• Develop and maintain secure system architectures, ensuring integration with wider infrastructure and enterprise network designs
• Manage and coordinate interfaces with network architecture teams, ensuring consistency across security and network domains
• Identify and mitigate security risks and vulnerabilities across systems and infrastructure components
•  Support and contribute to penetration testing (pentesting) activities, including:
o preparation and scope definition
o remediation of findings
o validation of security controls
• Produce and maintain security design documentation, including architecture artefacts, standards, and procedures
• Ensure systems meet applicable security standards, compliance requirements, and accreditation needs
• Provide technical guidance to engineering and delivery teams on secure design and implementation
 

ESSENTIAL SKILLS:
• Strong understanding of system and network security architecture principles
• Hands-on experience with server hardening (Linux/Windows) and secure configuration management
• Experience in network security, including firewalls, routing, segmentation, and access control
• Knowledge of security standards and frameworks (e.g. NIST, ISO 27001, CIS benchmarks)
• Familiarity with penetration testing methodologies and vulnerability management processes
• Ability to define and enforce security requirements and controls across infrastructure
• Experience working with secure system integration and multi-domain environments
• Strong analytical and problem-solving skills
• Excellent stakeholder communication and documentation capability
 

ESSENTIAL EXPEIRENCE:
• Proven experience in a Security Architect, Security Engineer, or Systems Security role
• Experience designing and implementing secure infrastructure solutions in complex environments
• Demonstrated experience in system hardening and security configuration management
• Experience working with network architecture and infrastructure teams
• Involvement in security assurance activities, including vulnerability management and penetration testing support
• Experience producing security architecture documentation and technical standards
• Background in regulated, high-assurance, or mission-critical environments is highly desirable