JDT Security Assurance Architect (Defence)

Location: Farnborough, Hampshire, UK; customer-site role with onsite attendance during the working week. Travel up to 10% UK-wide and to customer sites. Candidates must have the right to work in the UK, meet applicable UK Government and contractual residency requirements, and may be subject to nationality requirements.

Salary: Competitive salary and benefits package.

Company

hirify.global is a Fortune 500 IT services company delivering mission-critical solutions, with an Aerospace and Defence Hub in Farnborough supporting sensitive defence programmes.

What you will do

• Act as security design authority for Joint Design Teams, defining secure architectures, design patterns, security controls, and implementation guidance.
• Design and assure multi-classification environments, cross-domain solutions, browse-down patterns, Zero Trust architectures, cryptographic services, TEMPEST requirements, and physical separation controls.
• Lead threat modelling, security risk assessments, mitigation planning, residual-risk management, and Secure by Design assurance activities.
• Ensure designs align with JSP 440, UK Government security classifications, Def Stan 05-138, NCSC guidance, UK export controls, and applicable ITAR requirements.
• Lead security discussions, architecture workshops, design reviews, and governance boards with client teams, risk owners, technical architects, and suppliers.
• Produce security specifications, requirements and compliance traceability matrices, test plans, assurance evidence, and lifecycle documentation.

Requirements

• At least 8 years of information security experience, including security architecture or design assurance experience.
• Experience designing secure solutions across on-premises, hybrid, and cloud environments and leading security design reviews.
• Strong experience in defence, aerospace, or national security programmes.
• Experience delivering Secure by Design or equivalent security assurance outcomes and acting as a security design authority or technical leader in a security or Joint Design Team function.
• Strong knowledge of IT architecture and design principles, security reference architectures, and frameworks such as SABSA or TOGAF.
• Strong knowledge of IT security controls, network, infrastructure, application, and data security; multi-classification architectures; cross-domain solutions; and Zero Trust.
• Working knowledge of COMSEC, NCSC-approved cryptographic products, threat modelling, and risk assessment methodologies.
• Working knowledge of MOD security requirements, JSP 440, Def Stan 05-138, GovS 007, MOD Secure by Design, Government Security Classifications Policy, MOD Classification Guides, UK export controls, and applicable ITAR requirements.
• Working knowledge of Cyber Essentials Plus, NCSC guidance, ISO/IEC 27001, NIST SP 800-53, and the NIST Cybersecurity Framework.
• Eligible for and willing to undergo DV clearance, with strong analytical, communication, technical leadership, influencing, and architectural decision-making skills.

Nice to have

• Current active DV clearance.
• CISSP, CISM, SABSA, UKCSC Security Architecture, or equivalent certification.
• Experience with the NCSC Cyber Assessment Framework, Common Criteria, formal security evaluation frameworks, COMSEC deployments, TEMPEST, supply-chain security, NATO Architecture Framework v4, or defence acquisition lifecycles such as CADMID/CADMIT.
• Background in systems engineering or infrastructure engineering.

Culture & Benefits

• Permanent, full-time employment with flexible working arrangements within a customer-site role requiring onsite attendance during the working week.
• Enhanced pension and private medical insurance.
• Professional development and security training, including specialist training in TEMPEST, supply-chain security, and NAF v4 where required.
• Opportunity to work on high-impact defence programmes and complex defence security challenges.
• Employment is subject to satisfactory background checks and security vetting.

Hiring process

• An offer is conditional on satisfactory completion of background checks and security vetting, including applicable personnel security requirements.