Stakeholder and customer engagement

• Lead or support customer workshops, solution reviews, technical briefings, due diligence and transition planning.
• Support pre-sales, bids and proposals by shaping security requirements and validating solution approaches.
• Communicate architectural decisions, risks, assumptions and trade-offs clearly.
• Work effectively with customers, suppliers, sales, pre-sales, engineering, delivery, operations and assurance teams.
• Influence outcomes without relying on direct authority.

Technical leadership

• Provide clear implementation guardrails and design intent to engineering and delivery teams.
• Mentor engineers, architects and security colleagues through design reviews, documentation and knowledge sharing.
• Contribute to technical communities of practice and the development of Redcentric’s architecture capability.
• Promote reusable design patterns, consistent standards and continuous improvement.

About you

You will be an experienced security professional who can operate independently as a trusted architectural authority. You will be comfortable making decisions in complex or ambiguous situations and escalating significant risks or cross-domain issues when wider input is required.

You will combine deep technical security knowledge with strong commercial awareness, stakeholder engagement and an understanding of how services must be delivered and supported within a managed service environment.

Skills and behaviours

You will demonstrate:

• Strong security architecture judgement and technical authority.
• Structured architectural thinking and risk-based decision-making.
• The ability to turn complex customer, business and regulatory requirements into practical designs.
• A pragmatic approach that balances security, risk, supportability, cost and customer value.
• Strong communication, facilitation and influencing skills.
• The confidence to challenge constructively and make clear recommendations.
• The ability to produce concise, high-quality architecture and security documentation.
• Comfortable getting hands on with technology and AI.
• A collaborative, outcome-focused approach to problem-solving.
• The ability to mentor and guide engineering, architecture and operational teams.

Experience

We are particularly interested in candidates with experience in several of the following areas:

• Security architecture, cloud security, security engineering or senior security consultancy.
• Working within an MSP, MSSP, telecommunications provider, cloud provider, systems integrator or complex enterprise.
• Designing and assuring security across identity, networks, endpoints, cloud infrastructure, virtualisation and data protection.
• Defining architectures for security monitoring, vulnerability management, privileged access and incident response.
• Producing high-level designs, reference architectures, decision records, threat models and implementation guidance.
• Leading security design reviews or participating in architecture governance and technical design authorities.
• Supporting product strategy, service development, lifecycle planning and technical roadmaps.
• Working in regulated, public sector or critical service environments where auditability, resilience and evidence are important.
• Supporting customer workshops, pre-sales activities, bids or supplier assessments.
• Automation, scripting, Infrastructure as Code or repeatable security deployment practices.
• DevSecOps or AI-enabled security operations.

Technical knowledge

Relevant knowledge may include:

• Security operations and platforms

  • SOC, SIEM and SOAR.
  • EDR, NDR and XDR.
  • Vulnerability and attack-surface management.
  • Privileged Access Management.
  • SASE and Security Service Edge.
  • Cloud security posture management.
  • Logging, monitoring, incident response and evidence capture.

• Cloud, identity and infrastructure security

  • Zero Trust architecture and identity security.
  • Privileged access and delegated administration.
  • Network segmentation and endpoint protection.
  • Secure configuration and security guardrails.
  • Data protection, backup and resilience.
  • Azure, AWS and VMware security patterns.
  • Cloud-native security and observability.

• Governance, risk and compliance

  • Risk assessment and threat modelling.
  • Cyber resilience and disaster recovery.
  • Supplier and technology security assurance.
  • Security control ownership and operational responsibilities.
  • Telecommunications Security Act requirements.
  • NCSC guidance and the Cyber Assessment Framework.
  • ISO 27001, Cyber Essentials Plus, CIS Controls and NIST Cybersecurity Framework.
  • Customer-specific and sector-specific security obligations.

• Modern engineering

  • DevSecOps and platform engineering.
  • Infrastructure as Code and automation.
  • CI/CD, source control and secure release management.
  • Operational readiness and secure service transition.
  • Requirements, Constraints, Assumptions and Risks documentation.
  • Architecture decision records, control mappings and service blueprints.

Qualifications

Relevant certifications are desirable and may include:

• Security clearance desirable.
• CISSP, CCSP or CISM.
• Microsoft security certifications.
• AWS security certifications.
• VMware security certifications.
• TOGAF or another recognised architecture qualification.
• ITIL or an equivalent service-management qualification.
• DevOps, automation, platform engineering or Infrastructure as Code certifications.

Equivalent practical experience will be considered in place of formal certification.

What success looks like

In this role, you will:

• Establish clear architectural direction for standalone and integrated security products, and services.
• Improve the consistency and reuse of security patterns and standards.
• Strengthen security assurance and technical governance.
• Reduce design ambiguity, delivery rework and operational risk.
• Enable engineering teams through clear guidance and architectural guardrails.
• Improve the repeatability, supportability and operational readiness of security services.
• Help shape commercially viable security roadmaps.
• Build confidence with customers and internal stakeholders through clear, pragmatic advice.
• Develop security architecture and engineering capability through mentoring and knowledge sharing.