Solution Architect - Cyber Security Architecture

Solution Architect - Cyber Security Architecture

JOB LOCATION: Stevenage or Bolton (Preferred), could be Bristol

SECURITY CLEARANCE LEVEL - SC (BPSS To start) UKEO

DURATION: 12months + Minimum (Extension possibility- Yes, Dependent on Performance)

WORK PATTERN: HYBRID 2 Days Onsite a Week.

Overtime: Yes (Project dependant)

PAY RATE: £600 Per Day = £81.08 UMB Umbrella Inside IR35

This is a specialised Client role, and would focus on Solution Architects with Engineering IT Systems experience and strong Cyber Security Architecture knowledge.

The biggest mistake would be searching for general Cloud Solution Architects or Cyber Security Compliance Managers. Client needs someone who can understand complex engineering applications, document their architecture and align them with defence cyber security requirements.

Client uses engineering applications such as PTC Windchill and IBM ELM. They need someone to review how these systems are designed, connected, secured and documented, identify any security or architectural gaps, and prepare evidence for Defence Cyber Certification (DCC).

The role focuses on five activities:

• Architecture and documentation: Draw detailed diagrams showing applications, system connections, dependencies and data flows.
• Cyber security compliance: Identify gaps against DCC and Defence Standard 05-138, then document and support the necessary improvements.
• Identity and access management: Review and document user permissions, RBAC, authentication and access controls.
• Resilience: Document system recovery, business continuity and technical safeguards.
• Audit readiness: Prepare technical evidence and explain how security controls work to assessors.

DCC is a UK defence certification scheme based on Defence Standard 05-138. It requires organisations to demonstrate that their security controls are implemented and supported by evidence.

JOB LocaTION(S)

Stevenage or Bolton (Preferred), could be Bristol

SECURITY CLEARANCE LEVEL REQUIRED? START ON BPSS? UK Eyes only?

SC, BPSS start

DURATION - LIKELY TO BE EXTENDED?

12 months (extension possible)

WORK PATTERN - UPLIFT? (FLEX/SHIFTS/WEEKENDS)

2 days min a week on site, the rest remote

TRAVEL REQUIRED - FREQUENCY/DURATION/LOCATIONS

Potential travel to UK Sites (Rare if ever)

PAY RATE

£600 per day= £81.08 UMB

Interview Process & HM Availability to interview

Initial phone screening, followed by F2F/Virtual Interview

REASON FOR VACANCY (new role or replacement)

Workload

Essential QUALIFICATIONS

Skillset focussed (experience)

TARGET INDUSTRIES AND COMPANIES. Is Defence a must?

If not what industries can be considered

Def/Aero would be preferable. Can be open to other industries if skill set is apparent (IT knowledge & understanding is important for successful candidate).

Essential Skillset & Tools

• Enterprise Solution Architecture: Proven experience as a Solution Architect, Technical Architect, or Systems Designer, preferably specializing in engineering software ecosystems (eg, PTC Windchill, IBM ELM)
• Cyber Framework Mastery: Deep familiarity with UK defence sector frameworks, including Cyber Essentials, Def Stan 05-138, and the DCC evaluation model. Experience with ISO 27001 or NIST frameworks is highly desirable.
• Expert Diagramming & Modelling: Mastery of architectural diagramming frameworks (eg, TOGAF, UML, swim lanes, or process maps) to turn ambiguous Legacy systems into transparent, readable technical blueprints.
• Rigorous Attention to Accuracy: A "right-first-time" mentality regarding documentation, with a proven track record of converting abstract control concepts into practical, written standard operating procedures (SOPs).

Solution Architect - Cyber Security Architecture

Overview:

Digital Excellence function providing IT Services to the business.

Role Purpose:

We are seeking a highly structured and detail-oriented Solution Architect to spearhead the remediation, alignment, and modernization of our engineering application landscape toward UK MoD Defence Cyber Certification (DCC).

This role focuses intensely on the documentation, design blueprints, and architectural integrity of our engineering systems (including ALM, PLM, and Simulation & Modelling tools). You will bridge the gap between complex engineering systems, and data flows, and the rigorous technical, governance, and asset-management controls demanded by DCC. Your primary mission is to ensure our entire engineering software ecosystem is fully mapped, safely integrated, and rigorously documented to clear the independent evidence-based assessment required for DCC.

Key Responsibilities:

• Architectural Blueprinting & Mapping: Map and document topologies, data flows, and external dependencies.
• DCC Control Alignment: Systematically analyse our engineering application suites against the DCC controls. Lead the remediation of design and documentation gaps to ensure a pass score across all assessment objectives.
• Comprehensive Documentation & Evidence Indexing: Author and maintain precise architectural specifications, system diagrams, and configuration baselines. Build and maintain an exhaustive DCC Evidence Index that cross-references actual system configurations, access records, and recovery policies to specific Assessment Submission Record (ASR) requirements.
• Access & Identity Architecture: Redesign and document strict identity management, role-based access controls (RBAC), and change tracking for specialized engineering apps to satisfy asset and access controls.
• Resilience & Lifecycle Design: Formalize and validate recovery safeguards, business continuity plans, and disconnected/operational technology (OT) procedures for critical engineering systems.
• Stakeholder & Assessor Liaison: Collaborate directly with engineering leaders, IT operations, and the IASME-accredited Certification Body to present clear, practical demonstrations of controls during audits.

Skillset/Experience Required…