Cyber Security Architect

Requirements:

• Broad technical knowledge, particularly in cloud and hybrid technologies, identity management, and application security.
• Solid understanding of security protocols, networking, identity management, authentication, authorisation, and cryptography.
• Knowledge of secure development practices and the Software Development Lifecycle (SDLC).
• Experience in technical security architecture.
• Knowledge of Zero Trust principles, including those from the NCSC.
• Experience applying Identity and Access Management principles in hybrid environments.
• Solid understanding of governance, compliance, risk, and the Confidentiality, Availability, and Integrity (CIA) triad.
• Excellent communication and interpersonal skills, including the ability to explain security controls, solutions, and advice to stakeholders at all levels in technical and non-technical language.
• Knowledge and experience of threat modelling techniques.
• Ability to evaluate options and make decisions quickly and effectively.
• A collaborative, proactive, and self-motivated approach, including the ability to stay informed about emerging security technologies, threats, and trends and to drive personal learning.
• Candidates must already have the right to work in the UK at the time of application; this role is not eligible for Skilled Worker visa sponsorship.
• Applicants must provide an anonymised CV showing how they meet the essential criteria, a 500-word personal statement addressing the specified criteria, and a 250-word technical example demonstrating broad technical knowledge, especially around cloud and hybrid technologies.

Responsibilities:

• Work with the Chief Security Officer, Head of Cyber, Lead Security Architect, and wider security team to develop the IPO security vision, strategy, and supporting roadmaps.
• Ensure security architecture aligns with government security policies and frameworks, legal requirements, industry regulations, and best practice, including ISO 27001, NCSC standards, GDPR, PCI DSS, GovAssure, and Secure by Design.
• Champion Secure by Design and help build awareness and understanding of its framework across DDaT.
• Develop and manage the security architecture roadmap, coordinating and planning activities with relevant teams and aligning work with strategic direction and audit recommendations.
• Keep up to date with changes to compliance legislation and initiatives, and identify opportunities to educate colleagues on relevant security standards.
• Recommend security controls and identify solutions that support business objectives.
• Provide expert security guidance during the design, implementation, and use of systems, applications, and infrastructure.
• Advise teams and stakeholders on approaches and technologies, assessing risks associated with proposed changes.
• Shape security solutions and controls across on-premises, cloud, and hybrid platforms, providing oversight and support so technical teams can make informed security decisions.
• Promote effective use of common tools and patterns and proportionate controls to safeguard the IPOs data, essential services, and supporting infrastructure.
• Coordinate assurance against the NCSC Cyber Assessment Framework and the governments GovAssure framework.
• Influence stakeholders to apply security principles and communicate with them widely.
• Assist with incident response when needed to identify architectural issues and solutions.
• Engage proactively with internal and external partners, stakeholders, and peers to develop knowledge and inform decisions.
• Carry out other duties reasonably required in line with the main duties.

Technologies:

• Architect
• Cloud
• Cryptography
• Support
• Security
• Network

More

We are the Intellectual Property Office (IPO), and this Security Architect role is part of our IPO Secure team. The role is based at our Newport office and follows our hybrid working arrangements; staff are currently expected to spend at least 20% of their time onsite, with the balance to be agreed with the recruiting manager. The salary is £47,766, and we contribute £13,837 toward membership of the Civil Service Defined Benefit Pension scheme. Our benefits include flexible working, development opportunities, 25 days of annual leave increasing to 30 days over five years of reckonable service, eight public holidays and one privilege day, family-friendly policies, staff counselling and peer support, possible special and office-wide bonuses, inclusive staff networks, wellbeing initiatives, an onsite gym, an eye care scheme, volunteering opportunities, cycling facilities, free onsite parking, and an onsite shop, restaurant, and coffee shop. Benefits may change. The selection process assesses Leadership, Changing and Improving, Making Effective Decisions, and technical skills.

last updated 43 week of 2026