[Hiring] Senior Security Architect @Kainos

Role Description

As a Senior Security Architect (Manager) in Kainos, you’ll be responsible for the design and application of industry leading security practices in the platforms and services we build for our customers. Our projects range greatly in variety, from visa and passport processing systems, to hospital medical record platforms and global financial management and HCM systems.

• Work with Agile delivery teams to ensure adherence to good security practices throughout the software development journey.
• Learn about and apply new technologies and approaches with talented colleagues.
• Share knowledge and educate customers and Kainos team members on good security practices.
• Manage, coach, and develop a small number of staff, focusing on employee performance and career development.
• Provide direction and leadership for your team while solving challenging problems together.

Qualifications

• Expertise in leading the secure design of new cloud services and solutions in line with defined security strategies.
• Expertise in identifying security issues in existing system designs, including recommending sensible mitigations that balance cost, risk, and usability.
• Knowledge of security standards and regulations (e.g. NCSC, ISO, SoC, NIST, PCI, GDPR).
• Experience in one of the following specialisms: AI/ML/Data/Cloud/M365/Security Architecture.
• Experience in application architecture, software development, and/or infrastructure architecture.
• Industry experience in one of the following sectors: Public/Healthcare/Defence/Commercial Sectors.
• Experience in testing the security of software and infrastructure using appropriate security tools.
• Experience with Continuous Security, Continuous Integration, and Continuous Delivery techniques.
• Experience of network security (e.g. OSI, TCP/IP), web application security (e.g. OWASP), and cryptographic controls (e.g. PKI, TLS).
• Demonstrated ability in managing, mentoring, and coaching team members.
• Excellent communication skills, with the ability to convey security complexities to various technical audiences (e.g. senior stakeholders, development teams).

Requirements

• Experience of Identity management and authentication/authorisation products and patterns.
• Experience in at least one Industry Vertical.
• Involvement across the full security lifecycle.
• End-to-end security involvement, including governance, risk and compliance, operational security, supply chain security, and secure user management.
• Active participation in knowledge sharing activities, both within the team and externally.
• Penetration specialist certifications.

Benefits

• We believe in the power of diversity, equity, and inclusion.
• Commitment to building a diverse team where everyone is valued and respected.
• Support for candidates requiring accommodations or adjustments during the recruitment process.