Solution Architect (Technical Advisory)

Solution Architect (Technical Advisory)
Retail
Hybrid: 3 days onsite in either London or Welwyn - wherever is closest to you
6 months+
£750 - £800 per day

In short: Solution Architect with broad experience across data, network, infrastructure, application required to advise multiple technical teams on a strategy to rebuild an environment in the case of a total loss event.

In full:

As a Solutions Architect, you will be working with the Security Architecture team with specialty skills in advising and helping scale our security presence across the wider technology and infrastructure teams.

Candidates must have broad exposure to solution-level architecture for software and data systems, covering technology stacks across:

• hosting infrastructure that is on-premise, private cloud, and Azure public cloud
• technical component connectivity access considerations within a system and between systems.

In this role, candidates will be responsible for holding deep-dive technical sessions with development teams and providing guidance on what constitutes a total loss event (i.e., total unavailability of systems and major disruption to business services), what the teams should consider from a system's perspective that is required for a ground-up rebuild of their systems, and how to export/document the system & component-level configuration that is required to rebuild the system from scratch. Additionally, candidates should possess strong advisory skills to collaborate with development teams and provide the necessary technical guidance for them to act on the process/steps defined for recovery from a total loss event.

The role:

• Provide engineering and product teams with direction and guidance for all security matters.
• Help product teams deliver new business features securely while balancing and clearly articulating technical and business risk.
• Drive the deployment/integration of security capabilities into engineering teams within the product domain.
• Lead security initiatives such as developing security requirements, threat modelling, strengthening application security, and vulnerability reduction with the engineering teams.
• Support teams in a collaborative manner in matters of mobile application, web application, cloud, and data security, with threat modelling, risk treatment, and security advice across all security domains.
• Facilitate risk remediation while challenging decisions and the status quo.
• Facilitate assurance activities like penetration testing, purple testing, and app assurance.
• Build quarterly/monthly roadmaps for security activities and plan them.

Skills required:

• A thorough understanding of modern application development practices to introduce and embed security capabilities while minimising developer friction.
• Excellent interpersonal, facilitation, and leadership skills along with effective communication (both written and verbal) skills.
• Ability to provide security guidance to engineering teams throughout the product development lifecycle.
• Capability to develop threat models, attack trees, and embed security by design in product engineering efforts.
• Good understanding of software architecture, dev-sec-ops, and network security.

Candidates will ideally show evidence of the above in their CV to be considered.

Please be advised if you haven't heard from us within 48 hours, then unfortunately your application has not been successful on this occasion. We may, however, keep your details on file for any suitable future vacancies and contact you accordingly. Pontoon is an employment consultancy and operates as an equal opportunities employer.