What you'll do

• Own and maintain current-state, transition-state and target-state cybersecurity architecture for the platform and managed services.
• Design reusable, productised managed security offerings such as centrally managed firewall services, covering multi-tenancy, tenant segregation, policy and change lifecycle, high availability, disaster recovery, secure onboarding, telemetry, auditability and customer reporting.
• Ensure managed Wi-Fi, LAN, SD-WAN, cloud, infrastructure and related services are designed with security by default and consistent controls.
• Define and maintain platform guardrails, reference architectures, approved design patterns, technical standards and control baselines across network, identity, cloud, application and API, data, encryption, key and secrets management, endpoint and platform engineering.
• Partner with the CISO and cybersecurity governance teams to turn policies, regulatory obligations and risk requirements into implementable architecture and control requirements, and provide technical impact assessments and remediation options.
• Lead architecture review, design assurance and threat-modelling activities across the platform lifecycle from concept and build through release, customer onboarding, operation and technology refresh.
• Work with product owners, the platform architect, engineering, SOC, operations, service delivery, ITSM and other domain architects to prioritise security capabilities and keep implementation aligned with approved architecture.
• Define non-functional requirements and acceptance criteria covering security, availability, scalability, performance, resilience, recoverability, maintainability, observability, supportability and cost efficiency.
• Architect secure automation and orchestration capabilities including infrastructure as code, CI/CD, configuration and policy as code, automated compliance checks, standardised service provisioning and controlled customer changes.
• Ensure platform and service telemetry supports operations and security monitoring, including logging of permitted, blocked, failed, administrative and policy-change activities, with integration into observability, SIEM/SOC, ITSM/CMDB and customer reporting.
• Evaluate technologies, products, vendors and cloud services; lead technical assessments and proof-of-concept activities; and maintain technology standards, lifecycle roadmaps, end-of-life plans and technical debt priorities.
• Govern standard platform boundaries and assess customer-specific deviations for feasibility, security impact