About this role
Salary: £? - ? per year
Requirements: Proven experience building private cloud infrastructure, not just consuming public cloudStrong background with open-source infrastructure stacks, containerisation and platform technologiesDeep hands-on security architecture and engineering experience across large-scale datacentre or hybrid environmentsStrong threat-modelling and attack-path analysis skillsPractical knowledge of compute, virtualisation, containers, orchestration, storage, networking and platform managementExperience with IaC, CI/CD, policy-as-code and hardened image pipelinesExpertise in PKI, secrets, privileged access, segmentation, workload isolation and infrastructure hardeningAbility to define reusable patterns, measurable criteria and security standardsExperience with automated testing, attack simulation and vulnerability managementCredibility to influence multidisciplinary engineering teams and balance risk against delivery Responsibilities: Own and evolve threat modelling across the platform, infrastructure, workloads and onboarding pathwaysTranslate threat stories into engineering requirements, acceptance criteria and delivery prioritiesDrive secure-by-design practices through IaC, CI/CD, policy-as-code and hardened image pipelinesDefine reusable standards for identity, privileged access, secrets, PKI, segmentation, logging and recoveryTranslate NIST/STIG frameworks into pragmatic, testable controlsAutomate posture, evidence and continuous validation across the platformAct as the security conduit across engineering, programme leadership and enterprise security Technologies: ArchitectCI/CDCloudEmbeddedSecurityDevSecOps More:
Were hiring an Enterprise Security Architect to work between architecture and engineering on a major on-premises private cloud build. This is not a public-cloud security role: were shaping the security foundations of brand-new private cloud infrastructure using open-source software stacks and modern platform-engineering practices. The role is embedded full-time within an engineering-led programme as a dedicated security partner, working directly with architects and engineers to turn threats into mitigations, automated tests, hardened configurations and auditable evidence.
last updated 40 week of 2026