Security Architect (UKSV)

Job summary

As an SEO Security Architect, you will provide guidance to technical teams, enabling them to make risk-informed design decisions across services, infrastructure, and platforms. Operating at the Practitioner level within the Government Digital and Data Framework, you will balance security requirements with delivery needs, applying NCSC principles and "Secure by Design" guardrails.

Please note that all roles with UK Security Vetting are reserved posts and therefore open to UK nationals only . For full information on Eligibility, please refer to the attached Job Pack.

Job description

You will work closely with Delivery Managers, Technical Architects, Software Engineers, and Information Risk Owners to design systems that are resilient to compromise, easy to monitor, and proportionate in their security controls.

Example of tasks performed within the role:

• Support the design, documentation and review of secure multi-cloud and hybrid architectures
• Participate in structured threat modeling and architecture risk assessments across cloud and on-prem workloads
• Maintain and evolve security architecture artefacts while tracking emerging cloud security capabilities
• Assist in configuring and monitoring cloud security posture, vulnerability management and telemetry tools
• Provide architectural guidance and control recommendations in response to internal cybersecurity inquiries
• Report to Lead Security Architect and expect to grow into architectural ownership with mentorship

Person specification

As a Security Architect within UK Security Vetting, we are looking for people who have the following expertise and attributes:

• Personally taking responsibility for delivering a timely, high quality and cost effective service with focus and energy.
• Ability to empower and make changes that add value, with a strong focus on improved outcomes and performance by encouraging innovation, giving people the space to take initiative in flexible interdependent communities.
• Be visible, accessible, you communicate confidently and provide clear direction reflecting genuine care for colleagues.
• Demonstrate positive customer service outcomes by understanding the complexity and diversity of customer needs and expectations.
• Have the ability to establish and maintain strong relationships at all levels in the organisation, working collaboratively across teams, engaging and building trust to generate commitment to goals.
• Have an interest in looking for flaws in the way systems are used, built and maintained and the identification of mitigation opportunities.

Essential:

• Security Architecture Principles: Proven experience applying secure design patterns, Zero Trust concepts, and protective security controls to cloud (Oracle/AWS/Azure/GCP) or hybrid infrastructure.
• Enabling Risk-Based Decisions: Ability to evaluate vulnerabilities, articulate risk impact clearly, and recommend cost-effective, proportionate mitigations.
• Technical Knowledge: Strong grounding in core infrastructure and application security, including identity management (IAM), network security, cryptography, containerisation, and CI/CD pipelines.
• Standards & Frameworks: Familiarity with UK Civil Service and national cyber security frameworks (NCSC Design Principles, GovAssure / Cyber Assessment Framework, Secure by Design).
• Communication: Strong interpersonal skills with the ability to influence delivery teams, challenge non-secure practices pragmatically, and explain technical risks to non-technical partners.
• Hands-on experience with security solutions (e.g. EDR/AV, MDM, patch management and endpoint hardening).
• A strong understanding of how vulnerabilities occur and how they are exploited.

Desirable:

• Similar architecture experience in public sector.
• Experience of legacy migration and re-platforming of digital services.
• Interest in forming government best practices, standards and policies.
• Experience in managing commercial suppliers to deliver digital services.
• Experience with Oracle Cloud Infrastructure (OCI).
• Experience with Vulnerability Management and Remediation.
• Knowledge of network security tools (e.g. SIEM, IDS/IPS and SD-WAN).

Additional information:

Cabinet Office policy is that a minimum 60% of your working time should be spent at your principal workplace. For some roles, due to their nature and the business need, this may be up to 100%. Requirements to attend other locations for official business will also count towards this level of attendance.

Behaviours

We'll assess you against these behaviours during the selection process:

• Changing and Improving
• Making Effective Decisions

We only ask for evidence of these behaviours on your application form:

• Changing and Improving

Technical skills

We'll assess you against these technical skills during the selection process:

• Analysis, Communication (Security Architect), Designing Secure Systems, Enabling and informing risk-based decisions, Research and Innovation, Security Technology, Understanding security implications of transformation

Benefits

Alongside your salary of £45,292, Cabinet Office contributes

£13,121 towards you being a member of the Civil Service Defined Benefit Pension scheme.

Find out what benefits a Civil Service Pension provides (opens in a new window).

• Learning and development tailored to your role.
• An environment with flexible working options.
• A culture encouraging inclusion and diversity.
• A Civil Service Pension which provides an attractive pension, benefits for dependants and employer contributions of 28.97%.
• A minimum of 25 days of paid annual leave, increasing by one day per year up to a maximum of 30.

Things you need to know

Artificial intelligence

Artificial intelligence can be a useful tool to support your application, however, all examples and statements provided must be truthful, factually accurate and taken directly from your own experience. Where plagiarism has been identified (presenting the ideas and experiences of others, or generated by artificial intelligence, as your own) applications may be withdrawn and internal candidates may be subject to disciplinary action. Please see our candidate guidance (opens in a new window) for more information on appropriate and inappropriate use.

Selection process details

This vacancy is using Success Profiles (opens in a new window) , and will assess your Behaviours, Experience and Technical skills.

Application process

At the sift stage you will be assessed on the Behaviours and Experience elements of the Success Profiles.

You will be asked to provide a 250-word statement on the Behaviour Changing and Improving.

To assess experience you will be asked to provide a 750-word personal statement and a name-blind (anonymous) CV.

Please provide a personal statement of no more than 750 words. It should explain a summary of your skills and achievements to show that you have the relevant experience, skills and attributes required for the role. Please detail your experience relevant to the role and carefully consider the criteria listed in the person specification.

Further details around what this will entail are listed on the application form.

Should a large number of applications be received, an initial sift may be undertaken using the Personal Statement. Candidates who pass this stage could advance to a full review or progress straight to the interview stage .

Selection process

At interview, you will be assessed on the Behaviours, Experience and Technical elements of the Success Profiles.

The Behaviours being assessed are Changing and Improving and Making Effective Decisions.

Please refer to the Government Digital and Data Profession Capability Framework here then search for the role and grade you are applying for. Technical is the demonstration of specific professional skills, knowledge or qualifications which will be assessed at interview. We’ll be assessing your experience and specialist technical skills against the following skills defined in the Digital, Data and Technology Profession Capability Framework for Security Architect.

• Analysis
• Communication (Security Architect)
• Designing Secure Systems
• Enabling and informing risk-based decisions
• Research and Innovation
• Security Technology
• Understanding security implications of transformation

Interviews will be held face-to-face in Glasgow and York. If you are not able to attend any of the available interview dates we may not be able to offer alternatives.

• Expected timeline (subject to change)
• Expected sift date – 8 October onwards
• Expected interview date/s – 9 November

Your interview is expected to be conducted face to face, however there may be occasions where this will change. You will be notified of the location if you are selected for interview.

Reasonable adjustments

If a person with disabilities is put at a substantial disadvantage compared to a non-disabled person, we have a duty to make reasonable changes to our processes.

If you need a change to be made so that you can make your application, you should:

• Contact Government Recruitment Service at: cabinetofficerecruitment.grs@cabinetoffice.gov.uk as soon as possible before the closing date to discuss your needs.
• Complete the ‘assistance required’ section in the ‘personal information’ page of your application form to provide information we should be aware of that will enable us to support you further on in the recruitment process. For instance, you may need wheelchair access at an interview, or if you’re deaf, a Language Service Professional.

Further Information

A reserve list may be held for a period of 12 months from which further appointments can be made.

Any move to Cabinet Office from another employer will mean you can no longer access childcare vouchers. This includes moves between government departments. You may however be eligible for other government schemes, including Tax Free Childcare; for further information visit the Childcare Choices website .

If successful and transferring from another Government Department a criminal record check may be carried out.

In order to process applications without delay, we will be sending a Criminal Record Check to Disclosure and Barring Service/Disclosure Scotland on your behalf.

However, we recognise in exceptional circumstances some candidates will want to send their completed forms direct. If you will be doing this, please advise Government Recruitment Service of your intention by emailing Pre-EmploymentChecks.grs@cabinetoffice.gov.uk stating the job reference number in the subject heading.

For further information on the Disclosure Scotland confidential checking service telephone: the Disclosure Scotland Helpline on 0870 609 6006 and ask to speak to the operations manager in confidence, or email Info@disclosurescotland.co.uk

Please note that this role requires SC clearance, which would normally need 5 years’ UK residency in the past 5 years. This is not an absolute requirement, but supplementary checks may be needed where individuals have not lived in the UK for that period. This may mean your security clearance (and therefore your appointment) will take longer or, in some cases, not be possible.

For further information on National Security Vetting please visit the Demystifying Vetting website .

Applicants who are successful at interview will be, as part of pre-employment screening, subject to a check on the Internal Fraud Database (IFD). This check will provide information about employees who have been dismissed for fraud or dishonesty offences. This check also applies to employees who resign or otherwise leave before being dismissed for fraud or dishonesty had their employment continued. Any applicant’s details held on the IFD will be refused employment.

A candidate is not eligible to apply for a role within the Civil Service if the application is made within a