Cyber Design Lead

Project overview

Cyber Design Lead

Project details

Sheffield

December - Extension Highly Likely

Work Pattern: 3 days onsite per week

£450 - 500 DoE - Day Rate

Clearance: Must be eligible for BPSS

Role Overview

We're looking for a Cyber Design Lead / Design Engineer to own end-to-end solution design across cybersecurity initiatives. You'll produce architecture design documents, high-level designs, architecture patterns, decision records, risk assessments, and technical governance artefacts.

The role requires someone comfortable presenting solutions to Design Authorities, senior stakeholders, and leadership teams, while providing technical leadership across cybersecurity transformation programmes.

Essential Experience

Cyber Security Architecture

Identity & Access Management

IAM Knowledge Areas

Key Responsibilities

Architecture & Design

Governance

Risk Management

Leadership

Preferred Certifications

Tools

Ideal Candidate

A senior Cyber Architect or Cyber Design Lead with deep IAM and HashiCorp Vault expertise, strong architecture governance experience, and a track record delivering security designs within large enterprise environments, ideally within regulated sectors.

#4834819 - Dan Sandoval

• Strong cybersecurity background in one or more of:
• Identity & Access Management (IAM)
• Security Operations & Incident Response
• Threat & Vulnerability Management
• Cloud Security
• Infrastructure Security
• Network Security
• Application Security
• Data Security
• Cryptography
• Experience working on large-scale IT and cyber transformation programmes.
• Strong understanding of both Enterprise Architecture and Solution Architecture.
• Ability to communicate complex security concepts to both technical and non-technical stakeholders.
• Knowledge of security governance, risk management, threats, vulnerabilities, and incident response.
• 3+ years' experience with HashiCorp Vault (preferably on-prem).
• 3+ years' experience using Terraform, including development of complex reusable modules.
• Strong experience integrating Vault, including:
• Secret Engines
• Authentication Methods
• Reusable integration patterns
• Experience troubleshooting and resolving Vault integration issues.
• Experience designing or implementing Workload Identity Frameworks.
• Able to define and influence enterprise secrets management strategy.
• Federated Identity Management
• Single Sign-On (SSO)
• Privileged Access Management (PAM)
• Authentication protocols including:
• Kerberos
• OAuth
• SAML
• Produce and maintain end-to-end solution designs.
• Translate business requirements into secure architecture solutions.
• Create and maintain architecture decision records.
• Identify and manage design deviations and technical debt.
• Document and mitigate technical risks and issues.
• Ensure solutions are efficient, scalable, and cost-effective.
• Promote strong documentation standards and governance.
• Present designs through governance and design authority processes.
• Ensure architecture artefacts undergo peer review.
• Gain approval for patterns, designs, risks, and deviations.
• Identify, manage, and escalate technical risks.
• Define remediation plans.
• Understand and explain the impact of design decisions on risk and delivery.
• Provide technical leadership within cybersecurity.
• Act as a subject matter expert across programmes.
• Lead and mentor architects, engineers, and analysts.
• Support programme management activities when required.
• CISSP
• CISM
• SABSA
• TOGAF
• Jira
• Confluence
• Start: flexible
• Location: Sheffield, GB
• Rate: 63-63 EUR/h