About this role
Salary: £? - ? per year
Requirements: Strong cybersecurity background in one or more of the following: Identity and Access Management (IAM), Security Operations and Incident Response, Threat and Vulnerability Management, Cloud Security, Infrastructure Security, Network Security, Application Security, Data Security, or CryptographyExperience working on large-scale IT and cybersecurity transformation programmesStrong understanding of Enterprise Architecture and Solution ArchitectureAbility to communicate complex security concepts to technical and non-technical stakeholdersKnowledge of security governance, risk management, threats, vulnerabilities, and incident responseAt least 3 years experience with HashiCorp Vault, preferably on-premisesAt least 3 years experience using Terraform, including developing complex reusable modulesStrong experience integrating Vault, including secret engines, authentication methods, and reusable integration patternsExperience troubleshooting and resolving Vault integration issuesExperience designing or implementing Workload Identity FrameworksAbility to define and influence enterprise secrets management strategyKnowledge of federated identity management, Single Sign-On (SSO), Privileged Access Management (PAM), and authentication protocols including Kerberos, OAuth, and SAMLPreferred certifications: CISSP, CISM, SABSA, or TOGAFFamiliarity with Jira and ConfluenceMust be eligible for BPSS clearance Responsibilities: Own end-to-end solution design across cybersecurity initiativesProduce and maintain solution designs, architecture design documents, high-level designs, architecture patterns, decision records, risk assessments, and technical governance artefactsTranslate business requirements into secure architecture solutionsIdentify and manage design deviations and technical debtDocument and mitigate technical risks and issues, define remediation plans, and escalate risks when neededEnsure solutions are efficient, scalable, and cost-effectivePromote strong documentation standards and governancePresent designs through governance and design authority processesEnsure architecture artefacts undergo peer review and gain approval for patterns, designs, risks, and deviationsExplain the impact of design decisions on risk and deliveryProvide technical leadership and act as a subject matter expert across programmesLead and mentor architects, engineers, and analystsSupport programme management activities when required Technologies: ArchitectCloudCryptographyConfluenceIAMSupportJIRANetworkOAuthSAMLSecurityTOGAFTerraformDevOps More:
We are recruiting a Cyber Design Lead / Design Engineer for a role based in Sheffield, running from December with an extension highly likely. The working pattern is three days onsite per week, and the day rate is dependent on experience. We are seeking a senior cyber architect or design lead with deep IAM and HashiCorp Vault expertise, strong architecture governance experience, and a record of delivering security designs in large enterprise environments, ideally in regulated sectors. The role includes presenting solutions to design authorities, senior stakeholders, and leadership teams, and providing technical leadership across cybersecurity transformation programmes. Hays Specialist Recruitment Limited is acting as an employment agency for permanent recruitment and an employment business for the supply of temporary workers; applications are subject to its terms, privacy policy, and disclaimers.
last updated 41 week of 2026