Cyber Design Lead

Cyber Design Lead
Location: Sheffield
Duration: December - Extension Highly Likely
Work Pattern: 3 days onsite per week
Rate: £(Apply online only) DoE - Day Rate
Clearance: Must be eligible for BPSS

Role Overview

We're looking for a Cyber Design Lead / Design Engineer to own end-to-end solution design across cybersecurity initiatives. You'll produce architecture design documents, high-level designs, architecture patterns, decision records, risk assessments, and technical governance artefacts.
The role requires someone comfortable presenting solutions to Design Authorities, senior stakeholders, and leadership teams, while providing technical leadership across cybersecurity transformation programmes.

Essential Experience

Cyber Security Architecture

• Strong cybersecurity background in one or more of:
  • Identity & Access Management (IAM)
  • Security Operations & Incident Response
  • Threat & Vulnerability Management
  • Cloud Security
  • Infrastructure Security
  • Network Security
  • Application Security
  • Data Security
  • Cryptography

• Experience working on large-scale IT and cyber transformation programmes.
• Strong understanding of both Enterprise Architecture and Solution Architecture.
• Ability to communicate complex security concepts to both technical and non-technical stakeholders.
• Knowledge of security governance, risk management, threats, vulnerabilities, and incident response.

Identity & Access Management

• 3+ years' experience with HashiCorp Vault (preferably on-prem).
• 3+ years' experience using Terraform, including development of complex reusable modules.
• Strong experience integrating Vault, including:
  • Secret Engines
  • Authentication Methods
  • Reusable integration patterns
• Experience troubleshooting and resolving Vault integration issues.
• Experience designing or implementing Workload Identity Frameworks.
• Able to define and influence enterprise secrets management strategy.

IAM Knowledge Areas

• Federated Identity Management
• Single Sign-On (SSO)
• Privileged Access Management (PAM)
• Authentication protocols including:
  • Kerberos
  • OAuth
  • SAML

Key Responsibilities
Architecture & Design

• Produce and maintain end-to-end solution designs.
• Translate business requirements into secure architecture solutions.
• Create and maintain architecture decision records.
• Identify and manage design deviations and technical debt.
• Document and mitigate technical risks and issues.
• Ensure solutions are efficient, scalable, and cost-effective.
• Promote strong documentation standards and governance.

Governance

• Present designs through governance and design authority processes.
• Ensure architecture artefacts undergo peer review.
• Gain approval for patterns, designs, risks, and deviations.

Risk Management

• Identify, manage, and escalate technical risks.
• Define remediation plans.
• Understand and explain the impact of design decisions on risk and delivery.

Leadership

• Provide technical leadership within cybersecurity.
• Act as a subject matter expert across programmes.
• Lead and mentor architects, engineers, and analysts.
• Support programme management activities when required.

Preferred Certifications

• CISSP
• CISM
• SABSA
• TOGAF

Tools

• Jira
• Confluence

Ideal Candidate
A senior Cyber Architect or Cyber Design Lead with deep IAM and HashiCorp Vault expertise, strong architecture governance experience, and a track record delivering security designs within large enterprise environments, ideally within regulated sectors.

Hays Specialist Recruitment Limited acts as an employment agency for permanent recruitment and employment business for the supply of temporary workers. By applying for this job you accept the T&C's, Privacy Policy and Disclaimers which can be found at (url removed)