Security Architect (Entra ID/Microsoft Azure)

Join a major technology transformation programme as a Security Architect. You will provide security architecture leadership across the full transformation lifecycle, ensuring that appropriate security controls are embedded into both coexistence and target-state designs.

Proven experience applying Zero Trust, least privilege, privileged access and defence-in-depth principles

Location : the role will be onsite in London initially and then 50/50 hybrid

You will also be able to distinguish between genuine security risks and theoretical concerns that do not warrant disproportionate controls

You will be comfortable engaging with senior stakeholders and explaining complex security matters in straightforward language. When a risk needs to be escalated, you will be able to clearly articulate the issue, potential impact, available options and your recommended approach

Most importantly, you will be able to embed security by design while maintaining the momentum of a major transformation programme

You will be a pragmatic security professional who understands that effective security is about managing risk, not eliminating change

Responsibilities

• You will establish the programme's security architecture principles, assess threats and risks, and provide independent assurance over technical designs and migration approaches.
• The role requires strong technical security expertise, sound risk judgement, and the ability to find pragmatic solutions that allow the programme to move forward while maintaining an appropriate level of security.
• Establish and maintain the programme's security architecture principles, patterns, standards and control requirements.
• Define clear security design-assurance criteria and ensure that technical designs are assessed consistently against agreed requirements.
• Assess threats, risks, vulnerabilities and control gaps across the current, coexistence, transition and target states.

Requirements

• We are looking for an experienced Security Architect with a strong background in Microsoft cloud and hybrid enterprise environments
• Experience working within formal architecture and security-governance frameworks
• Strong technical writing skills, with experience producing security architecture documentation, risk assessments, threat models, control matrices and design-assurance outputs
• Ability to translate technical security risks into clear business impacts, choices and recommendations
• Experience designing security controls across endpoints, email, data, applications, infrastructure and networks
• Demonstrable experience in threat modelling, security risk assessment, control mapping and architecture assurance
• Extensive experience working as a Security Architect across complex enterprise technology environments
• Strong knowledge of identity and access security, including authentication, Conditional Access, identity protection and administrative controls
• Strong understanding of security logging, monitoring, threat detection and incident-response requirements
• Strong technical knowledge of Microsoft Entra ID, Microsoft 365, Azure, endpoint security, networks and application security
• Experience assessing security risks associated with migration, coexistence, cutover and transition activities
• Experience reviewing security exceptions and developing pragmatic risk-treatment or compensating-control strategies
• Strong understanding of hybrid and cloud security architectures and the challenges associated with transitioning from legacy environments
• Understanding of data protection, information governance and relevant regulatory or assurance requirements
• You will have the technical depth to challenge architects and engineers, but also the judgement to understand delivery constraints and work collaboratively towards solutions
• You will be confident operating in an environment where information is incomplete and decisions need to be made based on a combination of evidence, risk and professional judgement