End Date
Monday 23 December 2024 Salary Range
£68,202 - £75,780 We support flexible working – click here for more information on flexible working options
Flexible Working Options
Flexibility in when hours are worked, Hybrid Working, Job Share Job Description Summary
We’re looking for a passionate and forward-thinking Solution Architect who can combine deep technical thought leadership with strong security knowledge & skills to help drive the Group’s Security capabilities forward. Job Description
JOB TITLE: Cloud Security Architect
SALARY: £68,202 - £75,780
LOCATION(S): Manchester
HOURS: Full-time
WORKING PATTERN: Our work style is hybrid, which involves spending at least two days per week currently, or 40% of our time, at our office location.
About this opportunity
You’ll sit within Chief Security Office (CSO) Cloud Enterprise Security Architecture. As a team of Cloud Security Architects providing cloud security consultancy and design services to both Cloud Platform teams, and to external Value Stream / Lab customers, our role is to enable the bank’s adoption of public cloud whilst following Secure-by-Design principles.
The CSO is a vital part of delivering the Group’s vision of putting customers at the heart of everything we do, helping Britain prosper and protecting the Group and customers from security threats. We’re responsible for defining and communicating Lloyds Banking Group’s security strategy and providing a variety of critical Enterprise Security Services which not only operate key controls that keep the Group safe but also enable the digital transformation agenda of the wider organisation.
Experienced Cloud Security experts needed to articulate the security capabilities of a cloud product and its specific configuration to align with our principles and standards. They will threat model the product identifying the required preventative and detective guardrails that can be applied to ensure good configuration.
In addition, Security Assessments will be performed against new products to see if they are fit for purpose or performed against security topics or threats to understand the potential risk position to the bank and next actions to mitigate.
It is crucial that the applicant has outstanding written, drawing, and verbal communication skills, as one would expect from an architect or consultant. These skills are vital to effectively communicate information that will later be completed by our proficient engineering teams.
Whilst this is an architect role, and not an engineering role, applicants who have previous experience in engineering that informs their documentation are encouraged to apply. This role is for a Solution Architect close to the technology and how it is implemented, and not an Enterprise Architect.
Why Lloyds Banking Group
Like the modern Britain we serve, we’re evolving. Investing billions in our people, data, and tech to transform the way we meet the ever-changing needs of our 26 million customers. We’re growing with purpose. Join us on our journey and you will too.
What you’ll need
We need a Solution Architecture who understands the challenges of modern architecture. You’ll build a compelling strategic vision and will understand a wide array of technology implications including people and process, bringing this to your comprehensive view of design.
You’ll ideally have previous career experience in software or infrastructure engineering and will be well placed to define and sell your vision for Engineers, Architects, and Product Owners alike.
You must be a keen and comfortable communicator who is happy working with a wide range of technical and non-technical colleagues. You would be able to produce high quality documentation tailored to the audience which would include senior colleagues. As a role that can require demanding delivery timeframes, you’ll be self-organised and proactively prioritise your time.
You’ll:
* Liaise with various levels of colleagues up to board level

* Document reference, and retrospective, exec level architecture

* Document and review architectural patterns, architecture decisions, and blueprints

* Review external architecture proposals as they are presented, calling out issues and security concerns

* Produce high-level designs for security related products and features

* Understand and follow secure-by-design principles

* Understand risk processes and can identify, articulate and provide steps to mitigate

* Perform a Security Assessment to understand, document and surface perceived exposure and threats

* Perform a threat model and/or a design to identify the threats and mitigations

* Review existing deployments and identify gaps or beneficial additions

* Demonstrate experience with public cloud: Microsoft Azure, Google Cloud

* Demonstrate experience in a similar security focused role

* Work in a DevOps/Automation centric environment

* Operate as a self-starter, able to manage their workload, and identify and plan their next tasks

In addition, we’re in search of someone who holds the following experiences:
* Experience in Platform/Infrastructure Security

* Experience in Threat Modelling

* Experience in Cloud Compliance – guardrails and policies

* Understanding of API-based architectures

* Experience in Securing AKS/GKE/Istio (Kubernetes)

* Understanding of Cryptography – Keys, certificates

* Experience with secret management solutions

* Experience in network security – WAF/WAP/Firewalls

* Ability to be hands-on to perform basic PoCs to better understand products and assist with designs and reviews

About working for us
Our focus is to ensure we’re inclusive every day, building an organisation that reflects mod