Security Architect IV (Cybersecurity)

Location: Hybrid in Cardiff or London (Hayes), UK

Company

hirify.global Technology provides hybrid cloud, AI, multicloud, data, and security solutions for enterprise and regulated-industry customers.

What you will do

• Design and develop security frameworks, architectures, standards, policies, controls, strategies, and roadmaps for private cloud and sovereign services.
• Lead requirements gathering, threat modeling, security planning, control implementation, and secure architecture activities across the system development lifecycle.
• Assess third-party security products and services for compatibility, integration, and alignment with the overall architecture.
• Develop and implement security architecture based on ISO 27001/27002 and NIST 800-53, embedding information security policies into IT service methodologies.
• Design security baselines for IDS/IPS, firewalls, VPNs, operating systems, BYOD, and other security devices.
• Work with security operations, product teams, project teams, and customers to address vulnerabilities, define remediation plans, and communicate security controls and standards.

Requirements

• Advanced knowledge of infrastructure, architecture, operating systems, technology troubleshooting, design, implementation, and business impact.
• Experience working across cybersecurity, cloud computing, DevOps coding, and network or systems technologies.
• Experience with security governance, assurance, threat modeling, security controls, and architecture gap analysis.
• CISSP certification is essential.
• Ability to work in a hybrid arrangement from Cardiff or London (Hayes), UK.

Nice to have

• ISSAP certification.
• CISM, GIAC, Cisco, Microsoft SC-100, or other relevant vendor certifications.
• Experience supporting Cyber Assessment Framework and DSPT toolkit requirements.

Culture & Benefits

• Client-facing and internal work supporting NHS, government, and regulated-industry customers.
• Collaboration with security operations, product, project, and sovereign services teams.
• Work focused on cloud modernization, secure architecture, and end-to-end technology solutions.