Security Architect

is appointing a Security Architect as a contract associate for the definition phase of a major UK enterprise technology programme. You will provide a focused security review of the proposed integration approach and work with 's Chief Enterprise Architect, Lead Integration Architect and Oracle Technical Architect. The work will set the security requirements for how systems, APIs, files, identities and sensitive data connect. The expected commitment is about 5 days across an 8 to 10 week period. Delivery will be mainly remote, with limited planned travel where needed.

Tasks

• Review the current security controls affecting integrations, Oracle, bespoke applications and external connections.
• Define security requirements for APIs, messaging, file transfer and service accounts.
• Set identity, access, authentication, authorisation and privileged access requirements.
• Define encryption, key and secret management requirements.
• Define logging, monitoring, alerting and audit requirements.
• Review network boundaries and data flows for security risks.
• Identify the controls required before a connection can go live.
• Provide security questions and scoring criteria for platform and supplier selection.
• Rank security risks and recommend practical treatment.
• Produce a concise security architecture review and requirements set.

Requirements

• At least 8 years of security architecture experience.
• Strong recent experience designing security for APIs and enterprise integrations.
• Strong knowledge of identity and access, service accounts, secrets, encryption, API gateways, network separation, logging and monitoring.
• Experience working across legacy systems and modern integration platforms.
• Able to run threat modelling and turn risks into clear technical requirements.
• Able to explain security decisions clearly to non technical leaders.
• Clear written and spoken English.
• Based in the United Kingdom, with the right to work in the United Kingdom.
• Available for about 5 days across an 8 to 10 week period.

Experience with Oracle or ERP estates is useful. Experience in manufacturing, distribution or supply chain businesses is also useful. Experience with NCSC guidance or ISO 27001 environments is useful.

Benefits

• £500 to £675 per day, depending on directly relevant experience.
• Flexible delivery pattern across the agreed 8 to 10 week period.
• Direct access to 's Chief Enterprise Architect and senior client technology leaders.
• A focused piece of work with named outputs and decision points.
• Potential follow on security assurance work, subject to programme approval and performance.
• Pre agreed travel expenses paid separately.

Please apply with a current CV. The process is a short screening form, a 30 minute introductory call and one focused technical discussion. We will move quickly and keep the process clear. The engagement will be subject to contract, reference checks and an IR35 status assessment.