Job Search

We are seeking an experienced Cyber Security Architect to design, develop and maintain secure technology architectures across a complex and evolving digital environment. You will provide expert guidance on security strategy, architecture and risk, ensuring that systems, applications, infrastructure and cloud services are designed and operated in line with recognised security principles and regulatory expectations.

The role will involve producing and maintaining security architecture patterns, standards, reference models and design documentation. You will work closely with technology, engineering, product and risk teams to assess proposed solutions, identify vulnerabilities and recommend practical controls. Responsibilities will include conducting threat modelling, security risk assessments and design reviews; advising on identity and access management, network security, data protection, encryption, application security and cloud security; and supporting the selection and implementation of appropriate security technologies. You will also contribute to incident response, vulnerability management, security testing and the continuous improvement of cyber resilience.

Applicants should have substantial experience in cyber security architecture, security engineering or a closely related discipline, with a strong understanding of enterprise, cloud and application security. Experience of developing security strategies and architectures within regulated or complex environments is highly desirable. You should be confident interpreting security frameworks and standards such as NIST, ISO 27001, CIS Controls or similar, and be able to translate technical risks into clear business recommendations. Relevant professional qualifications, such as CISSP, CISM, SABSA, CCSP or equivalent experience, would be advantageous. Excellent communication and stakeholder-management skills are essential, alongside the ability to influence senior colleagues, explain complex concepts clearly and balance robust security with operational and commercial needs.

We are seeking an experienced Identity and Access Management Security Architect to design, develop, and oversee secure identity solutions across a complex technology environment. You will define IAM architecture and roadmaps that support business objectives while strengthening security, regulatory compliance, and operational resilience. The role will involve working across cloud, on-premises, hybrid, and modern application environments to establish consistent principles for authentication, authorisation, identity governance, and privileged access management.

Key responsibilities include developing reference architectures, security patterns, standards, and technical designs for identity services. You will lead the assessment and implementation of solutions such as single sign-on, multi-factor authentication, federated identity, role-based and attribute-based access control, identity lifecycle management, privileged access management, and machine or non-human identities. You will collaborate with security, infrastructure, engineering, application, risk, and audit teams to translate requirements into practical designs, review proposed solutions, and ensure that access controls are proportionate, measurable, and aligned with recognised security frameworks. You will also contribute to threat modelling, architecture reviews, incident response planning, technical documentation, and the continuous improvement of IAM capabilities.

The successful candidate will have substantial experience in IAM architecture, cybersecurity, or a closely related discipline, with a strong understanding of enterprise identity concepts and security controls. Practical knowledge of directory services, federation protocols such as SAML and OAuth 2.0, OpenID Connect, SCIM, certificate-based authentication, APIs, and cloud identity platforms is expected. Experience with privileged access, access reviews, segregation of duties, zero trust principles, and identity governance frameworks will be highly valued. You should be able to communicate complex technical matters clearly to both technical and non-technical stakeholders, influence decision-making, and manage competing priorities. Relevant professional certifications in security, architecture, cloud, or identity management are desirable, along with experience operating in regulated or highly controlled environments.

We are seeking an experienced IAM Security Architect to design and oversee secure, scalable identity and access management solutions across a complex technology environment. You will define the architectural vision for identity governance, privileged access, authentication, authorisation, and access lifecycle management, ensuring solutions align with business objectives, security standards, and regulatory requirements. The role will involve translating security and business needs into practical architecture, standards, roadmaps, and implementation plans.

You will work closely with cybersecurity, infrastructure, application, cloud, data, and engineering teams to embed identity controls into new and existing platforms. Responsibilities include assessing current IAM capabilities, identifying risks and improvement opportunities, developing target-state architectures, and providing technical guidance for transformation initiatives. You will establish design principles and patterns for role-based and attribute-based access control, single sign-on, multifactor authentication, identity federation, directory services, privileged access management, and joiner-mover-leaver processes. You will also contribute to security reviews, threat modelling, technology evaluations, solution assurance, and the development of policies, procedures, and technical documentation.

The successful candidate will have substantial experience in IAM or cybersecurity architecture, with a strong understanding of enterprise identity services, cloud platforms, zero-trust principles, and security frameworks. Practical knowledge of technologies such as Microsoft Entra ID, Active Directory, SAML, OAuth, OpenID Connect, SCIM, privileged access solutions, and identity governance platforms is highly desirable. You should be confident communicating complex technical concepts to both technical and non-technical stakeholders, influencing decision-making, and managing competing priorities. Relevant professional certifications, such as CISSP, SABSA, CCSP, or an identity-focused qualification, would be advantageous. A proactive, analytical approach and a commitment to improving security, usability, and operational resilience are essential.

We are seeking an Identity Management Consultant to help design, implement and improve secure identity and access management capabilities across a complex technology environment. You will work with technical teams, business stakeholders and security specialists to understand access requirements, assess current processes and deliver practical solutions that support secure, efficient and compliant user access. This role offers the opportunity to contribute to identity transformation initiatives, advise on best practice and help shape scalable operating models.

Key responsibilities will include gathering and documenting business and technical requirements; designing identity governance, access management and privileged access solutions; supporting the implementation and integration of identity platforms; and developing processes for joiner, mover and leaver management, access requests, approvals, reviews and remediation. You will assess existing controls, identify risks and recommend improvements aligned with security policies, regulatory obligations and industry standards. The role will also involve producing technical and functional documentation, preparing implementation plans, supporting testing and deployment, and providing guidance during operational handover. You may also contribute to incident investigations, audit activities, service improvement and the development of reporting and performance measures.

The successful candidate will have proven experience in identity and access management, information security or a closely related consulting role. You should understand concepts such as single sign-on, multi-factor authentication, role-based access control, identity lifecycle management, directory services, federation and privileged access management. Experience with leading IAM or identity governance platforms, cloud environments and integration technologies would be advantageous. Strong analytical, communication and stakeholder management skills are essential, together with the ability to translate complex technical issues into clear recommendations for varied audiences. Professional certifications in security, cloud or identity management are desirable. You must be organised, collaborative and comfortable managing multiple priorities while delivering high-quality outcomes in a changing environment.

We are seeking a Cyber Security Professional to help protect critical systems, data, and digital services against evolving cyber threats. This role will contribute to the development, implementation, and continuous improvement of security controls across infrastructure, applications, cloud environments, and end-user technologies. The successful candidate will work closely with technical and business stakeholders to identify risks, strengthen resilience, and promote a proactive security culture.

Responsibilities will include monitoring security events, investigating alerts and incidents, supporting vulnerability assessments, and coordinating appropriate remediation activities. You will assist with security risk assessments, penetration testing, threat modelling, access reviews, and the maintenance of security policies, standards, and procedures. The role will also involve contributing to incident response planning, forensic investigations, disaster recovery exercises, audit preparation, and compliance activities. You will provide clear guidance on secure system design and help ensure that projects meet relevant security requirements throughout their lifecycle.

Applicants should have professional experience in cyber security, information security, infrastructure security, or a related discipline, together with a strong understanding of common threats, vulnerabilities, and defensive technologies. Experience with security monitoring tools, endpoint protection, identity and access management, vulnerability management, cloud security, and incident response is desirable. Relevant certifications or qualifications will be advantageous. You should be analytical, organised, and confident communicating complex technical issues to both specialist and non-specialist audiences. A collaborative approach, strong attention to detail, sound judgement, and a commitment to continuous professional development are essential. The role may require participation in an out-of-hours incident response or on-call rota.

We are seeking an experienced Security Architect (Threat & Vulnerability) to strengthen the organisation’s cyber security capability and help protect critical systems, applications, data, and infrastructure. In this role, you will provide expert guidance on threat modelling, vulnerability management, security architecture, and risk reduction across complex technology environments. You will work closely with engineering, infrastructure, cloud, application, and governance teams to ensure security is built into the design, delivery, and operation of services.

Your responsibilities will include assessing emerging and existing threats, identifying vulnerabilities and weaknesses, and recommending practical, risk-based remediation strategies. You will define and maintain security architecture principles, patterns, standards, and controls, while reviewing proposed solutions and technology changes for security impact. You will support vulnerability assessments, penetration testing, threat-led reviews, and security investigations, translating technical findings into clear business risks and prioritised actions. The role will also involve monitoring the threat landscape, contributing to incident response and lessons learned, and helping improve security monitoring, resilience, and preventative controls.

The successful candidate will have substantial experience in security architecture, threat modelling, vulnerability management, or a closely related discipline. You will have a strong understanding of cloud security, networks, operating systems, applications, identity and access management, secure development practices, and recognised security frameworks and standards. Experience with vulnerability scanning, penetration testing methodologies, risk assessment, and security tooling is highly desirable. Relevant professional qualifications such as CISSP, SABSA, CCSP, or equivalent experience would be advantageous. You should be confident communicating with both technical and non-technical stakeholders, able to influence decision-making, and skilled at balancing effective security controls with operational and delivery requirements. A methodical, collaborative, and proactive approach is essential.

We are seeking an Application Security Engineer to help embed security throughout the software development lifecycle. In this role, you will work closely with software engineers, architects, DevOps specialists and product teams to identify and address security risks across web applications, APIs, cloud services and supporting infrastructure. You will contribute to building secure-by-design practices while helping teams deliver reliable, high-quality products.

Your responsibilities will include conducting application security assessments, threat modelling, vulnerability reviews and penetration testing; supporting secure code reviews; and analysing findings from automated and manual testing. You will help define security requirements, improve development standards and provide practical guidance on remediation. You will also assist with integrating security tools into CI/CD pipelines, developing security checks and metrics, tracking vulnerabilities through to resolution, and supporting incident investigations where application security is involved. A key part of the role will be communicating technical risks clearly to both technical and non-technical stakeholders and promoting security awareness across engineering teams.

The successful candidate will have professional experience in application or product security, software development, penetration testing or a closely related discipline. You should have a strong understanding of common application vulnerabilities, including those outlined by OWASP, as well as secure coding principles, authentication and authorisation, cryptography, API security and cloud security concepts. Experience with scripting or programming languages such as Python, JavaScript, Java, C# or Go, along with familiarity with tools for static analysis, dynamic testing, dependency scanning and container security, would be advantageous. We value curiosity, sound judgement and a collaborative approach, as well as the ability to prioritise risks and explain complex issues clearly. Relevant security certifications or equivalent practical experience are welcome.

We are seeking a Cyber Security Design Engineer specialising in Identity and Access Management (IAM) and secrets management to help design, implement and improve secure technology services across a complex enterprise environment. You will develop practical, scalable security designs that protect identities, privileged accounts, applications, infrastructure and sensitive credentials throughout their lifecycle. Working closely with architects, engineers, technology teams and business stakeholders, you will translate security requirements into robust technical solutions aligned with recognised security principles and regulatory expectations.

Your responsibilities will include defining IAM and secrets management patterns, standards and reference architectures; designing solutions for authentication, authorisation, privileged access, identity governance, service accounts, machine identities and cryptographic secrets; and assessing existing capabilities to identify risks and opportunities for improvement. You will produce high-quality design documentation, security assessments, implementation guidance and technical recommendations. The role will also involve supporting technology and delivery teams, reviewing proposed designs, contributing to threat modelling and risk assessments, and helping establish effective controls for the storage, rotation, monitoring and emergency recovery of credentials, keys, certificates and tokens.

The successful candidate will have substantial experience in cyber security engineering, solution design or security architecture, with strong hands-on knowledge of IAM technologies and secrets management platforms. You should understand concepts such as least privilege, role-based and attribute-based access control, federation, single sign-on, multi-factor authentication, privileged access management, identity lifecycle management and public key infrastructure. Experience with cloud environments, APIs, automation, infrastructure-as-code, directory services and DevSecOps practices is highly desirable. Strong communication and stakeholder-management skills are essential, as is the ability to explain complex technical issues clearly and make sound, risk-based decisions. Relevant professional certifications or demonstrable equivalent experience would be advantageous.

We are seeking a Cyber Security Specialist to help protect critical systems, data, and digital services from evolving security threats. The successful candidate will contribute to the development, implementation, and continuous improvement of cyber security controls across the organisation’s technology environment. This role is suited to a security professional who can combine strong technical knowledge with practical risk management and effective communication.

Key responsibilities will include monitoring security alerts and events, investigating potential incidents, and supporting timely containment, remediation, and recovery activities. You will conduct vulnerability assessments, coordinate the prioritisation and tracking of remediation actions, and contribute to penetration testing and security assurance activities. The role will also involve maintaining security policies, standards, procedures, and technical documentation; supporting access management and security reviews; and assisting with audit, compliance, and regulatory requirements. You may also provide guidance on secure system design, cloud security, endpoint protection, identity and access management, and the secure delivery of projects and services.

Applicants should have proven experience in cyber security, information security, security operations, or a closely related discipline, together with a relevant professional qualification or equivalent practical experience. Familiarity with security monitoring tools, SIEM platforms, vulnerability management solutions, incident response processes, and recognised security frameworks is desirable. Knowledge of common attack techniques, threat intelligence, risk assessment, and relevant data protection requirements will be valued. You should be analytical, organised, and able to explain technical risks clearly to both technical and non-technical audiences. The ability to work collaboratively, manage competing priorities, maintain confidentiality, and respond calmly to incidents is essential. A commitment to continuous learning and keeping pace with emerging threats and technologies is also expected.

We are seeking a Security Architect L1 (Contract) to support the design, implementation, and continuous improvement of secure technology solutions across a complex IT environment. This role is suited to a security professional with a strong understanding of enterprise architecture, information security principles, and risk management. You will work closely with infrastructure, cloud, application, and governance teams to ensure that security is embedded throughout the solution lifecycle.

Key responsibilities include reviewing proposed architectures and technical designs, identifying security risks, and recommending appropriate controls and mitigations. You will contribute to security architecture standards, patterns, and reference models, while supporting threat modelling, vulnerability assessments, and risk evaluations. The role will also involve assessing cloud and on-premises solutions, reviewing identity and access management arrangements, advising on network segmentation and data protection, and ensuring alignment with relevant security policies, regulatory requirements, and industry frameworks. You may also assist with security exceptions, audit activities, and the development of clear technical documentation for both technical and non-technical stakeholders.

Applicants should have practical experience in security architecture, cyber security engineering, or a closely related discipline, together with a sound understanding of infrastructure, applications, networks, cloud platforms, and modern security controls. Familiarity with frameworks such as ISO 27001, NIST, or CIS is desirable, as are certifications such as SABSA, CISSP, CCSP, or equivalent. Strong analytical, communication, and stakeholder-management skills are essential, along with the ability to explain complex security matters clearly and provide pragmatic, risk-based recommendations. This contract opportunity requires a proactive, collaborative professional who can manage competing priorities, work independently, and deliver high-quality outcomes within agreed timelines.