Security Architect - Security Solution Design

Role Overview

We are seeking an experienced Security Architect to design and embed security controls across a major application modernisation programme supporting Disability Living Allowance for Children (DLA-C) systems.

The role will focus on security solution design, architecture patterns, security documentation, risk assessment and ensuring security controls are embedded early within the software development lifecycle.

The programme involves the modernisation and refactoring of a large COBOL-based legacy system. The existing business processes are insufficiently documented, creating challenges around system support, debugging, staff knowledge transfer and implementation of legislative changes.

The successful candidate will work alongside architecture, engineering and delivery teams to ensure the modernised solution meets appropriate security standards and addresses identified architectural risks.

Key Responsibilities

• Design and develop security architecture for DLA-C systems.
• Create and maintain comprehensive security architecture documentation.
• Develop reusable security architecture patterns and standards.
• Review high-level architecture designs and identify required security controls.
• Ensure security is embedded early within the software development lifecycle.
• Work with security stakeholders to define and implement enterprise security patterns.
• Ensure high-level solution architecture aligns with relevant security standards.
• Identify security gaps and architectural weaknesses.
• Conduct security and architectural risk assessments.
• Document residual risks and define clear remediation paths.
• Provide security guidance to architecture and engineering teams.
• Review proposed technical solutions and recommend appropriate security controls.
• Support security considerations throughout the ongoing build and design phases.
• Collaborate with technical and business stakeholders across the programme.

Project Context

The programme involves the modernisation of a large legacy COBOL-based DLA-C system.

The project includes:

• Analysis of existing COBOL code and business processes.
• High-level and low-level solution design.
• Refactoring and modernisation of legacy functionality.
• Delivery across multiple waves.
• Ongoing build activity alongside architecture and detailed design.
• Addressing security, architectural and technical risks throughout the programme.

Required Skills

• Strong experience as a Security Architect.
• Proven experience in security solution architecture and design.
• Experience creating security architecture patterns and documentation.
• Experience reviewing high-level solution architectures.
• Strong understanding of security controls and secure SDLC practices.
• Experience defining enterprise security patterns and standards.
• Strong security risk assessment experience.
• Experience identifying architectural security gaps and residual risks.
• Ability to define practical remediation paths.
• Strong stakeholder engagement and communication skills.
• Experience working within large-scale application modernisation programmes.
• Experience with legacy application transformation/refactoring is desirable.
• COBOL/mainframe environment experience is desirable.

Eligibility

• Ability to work remotely within the UK.
• Willingness to attend the London or Manchester office as required.