Domain Architect - IT security
United Kingdom
Job Description
Domain Architect - IT security
Bristol, England

Job Summary

 Job Description – Cyber Security Architect (Cloud & Enterprise Security) Job Summary The Cyber Security Architect will be responsible for designing, governing, and enhancing the organization\'s security architecture across enterprise platforms, cloud environments, applications, and infrastructure. The role requires a strategic and hands-on security professional who can align cyber security controls with business objectives while ensuring compliance with industry standards and regulatory requirements. The successful candidate will possess deep expertise in modern enterprise technologies including Cloud, AI, APIs, and containerized microservices. They will evaluate security risks, perform threat modelling, and provide architectural guidance for secure solution delivery. The individual will work closely with engineering, operations, risk, and business stakeholders to ensure security is embedded throughout the technology lifecycle. Strong knowledge of security domains such as Identity and Access Management, endpoint security, network security, cryptography, and cloud security is essential. This role requires leadership, technical excellence, and the ability to influence secure technology decisions across large-scale enterprise environments.

Key Responsibilities

Develop and maintain enterprise security architecture frameworks, standards, and reference designs. Lead security reviews and provide architectural guidance for cloud, application, infrastructure, and digital transformation initiatives. Conduct threat modelling exercises using industry methodologies such as STRIDE and MITRE ATT&CK; to identify and mitigate cyber risks. Collaborate with development and operations teams to embed security controls into Agile and DevSecOps practices. Evaluate emerging technologies, cloud services, and AI solutions from a security perspective. Define security requirements for APIs, microservices, cloud platforms, and third-party integrations. Support security incident investigations by providing architectural expertise and remediation guidance. Ensure alignment with applicable security standards including ISO 27001, NIST, OWASP, PCI DSS, and COBIT. Work with governance, risk, and compliance teams to manage security risks and audits. Mentor security engineers and stakeholders while promoting security awareness and best practices across enterprise technology programs.

Skill Requirements

Skill Requirement Strong understanding of enterprise cyber security concepts, security architecture principles, and risk management practices. Proven experience with cloud technologies including Azure, AWS, or GCP, along with securing hybrid and multi-cloud environments. Extensive knowledge of Identity and Access Management, endpoint security, network security, encryption technologies, privileged access management, and security monitoring solutions. Hands-on experience with RESTful APIs, containerized microservices, Kubernetes, and modern application architectures. Expertise in threat modelling methodologies such as STRIDE and MITRE ATT&CK;. Understanding of secure software development practices, DevSecOps, vulnerability management, and cloud-native security controls. Familiarity with industry standards and frameworks including ISO 27001, NIST, PCI DSS, OWASP, and COBIT. Strong analytical, problem-solving, and stakeholder management skills. Ability to communicate complex security concepts to technical and non-technical audiences while balancing business requirements with effective security controls and risk mitigation strategies.

Other Requirements

Other Requirement Bachelor’s degree in Computer Science, Information Security, Engineering, or a related discipline, or equivalent industry experience. Professional certifications such as CISSP, CISM, CCSP, SABSA, TOGAF, or equivalent security architecture qualifications are highly desirable. Technical certifications including CEH, OSCP, GIAC, Azure Security Engineer, AWS Security Specialty, or related credentials will be advantageous. Demonstrated experience working in large enterprise organizations with complex technology landscapes. Strong communication, documentation, presentation, and stakeholder engagement capabilities. Ability to influence senior leadership and drive security initiatives across multiple teams. Experience participating in technology governance boards, audit reviews, and risk assessments. Understanding of regulatory and compliance obligations relevant to financial services and highly regulated industries is preferred. Self-motivated professional with excellent organizational skills, attention to detail, and the ability to manage multiple priorities within a fast-paced and evolving technology environment. Additional Request (Job Description) The ideal candidate will serve as a trusted security advisor and strategic partner for technology and business teams. They will contribute to the secure adoption of cloud platforms, emerging technologies, AI-driven solutions, and enterprise modernization programs. The role demands a balance of strategic thinking and technical execution, enabling the architect to translate business objectives into secure and scalable technology solutions. Candidates should demonstrate a proactive approach toward identifying security gaps, recommending improvements, and driving remediation activities. Experience working with cross-functional teams in Agile delivery environments is essential. The successful candidate should have a passion for cyber security innovation, continuous learning, and operational excellence. They must be capable of leading complex security initiatives, influencing architectural decisions, and fostering a security-first culture across the organization. Previous experience within banking, financial services, insurance, or other highly regulated industries will be considered a strong advantage.

Information at a Glance

Why HCLTech?

At HCLTech, you'll supercharge your potential. You'll find your career. And you'll find your spark. All at a place that knows that helping its customers stay on top starts by putting its people first.

HCLTech is a global technology company, home to more than 223,000 people across 60 countries, delivering industry-leading capabilities centered around digital, engineering, cloud and AI, powered by a broad portfolio of technology services and products. We work with clients across all major verticals, providing industry solutions for Financial Services, Manufacturing, Life Sciences and Healthcare, Technology and Services, Telecom and Media, Retail and CPG, and Public Services. Consolidated revenues as of 12 months ending June 2026 totaled $14.8 billion.