Security Architect

As an Arcadian, you already help us deliver world leading sustainable design, engineering, and consultancy solutions for natural and built assets. You are part of our global business comprising 34,000 people, in over 30 countries, dedicated to improving quality of life.

Everyone has an important role to play. With the power of many curious minds, together we can continue to solve the world’s most complex challenges and deliver more impact together.

The Tech Security Architect will define and govern secure, resilient technology architecture for the Technology Function, translating business drivers and risk priorities into scalable, future-ready infrastructure and operational security solutions. This role ensures platforms are secure by design, aligned to business outcomes, and sustainable, while managing risk, complexity and long-term service quality.

Translate business and technology strategy into architectural principles, reference models and future-state roadmaps.

Design enterprise-wide infrastructure and platform architecture spanning on-prem, hybrid, multi-cloud, data centres, AI/ML foundations, edge and emerging technologies.

Ensure interoperability, scalability, maintainability, performance and resilience across the IT estate.

Define and enforce non-negotiable architecture standards, controls and guardrails.

Embed “secure by design” and resilience principles into all technology designs.

Govern adherence to architecture through reviews, patterns and design assurance.

Lead gap analyses between current and future states.

Define migration and modernisation plans aligned to business priorities.

Assess infrastructure readiness for AI workloads and data-intensive platforms.

Embed AI-driven infrastructure and automation approaches where appropriate.

Partner with Enterprise Architecture, Solution and Domain Architects to ensure alignment across programmes and platforms.

Engage with business, security, SOC, risk, legal, vendors and DevOps teams to balance requirements, constraints and opportunities.

Provide architectural direction, coaching and mentoring to uplift capability.

Identify and assess architectural risk across platforms, integrations, data flows and infrastructure landscapes.

Provide clear, evidence-based trade-off recommendations balancing speed, cost, risk, scalability and long-term sustainability.

Prevent unnecessary complexity by enforcing architectural standards and reducing duplication across technology towers.

Embed security into DevOps and platform engineering (shift-left and continuous validation).

Define threat modelling, detection engineering and secure runbook expectations.

Enable continuous threat exposure management (CTEM) across infrastructure and applications.

Deliver a coherent, secure and resilient global technology architecture.

Align technology roadmaps to business outcomes and operational needs.

Reduce technical debt and unmanaged complexity across the IT estate.

Accountable for the health, safety, and wellbeing (HSW) of their teams, and expected to demonstrate stewardship and care in all aspects of their role. This includes championing an ambitious, people-first culture within Technology by setting clear HSW expectations, leading by example, empowering and engaging employees, and communicating openly.

Leaders should recognize safe behaviors and foster a caring, One Team ethos—where everyone feels empowered to take responsibility, speak up, and return home unharmed, both physically and psychologically.

8+ years’ experience in security related architecture.

Proven track record defining and implementing enterprise architecture strategy across multiple technology towers, including applications, data, infrastructure, and security.

Strong expertise in integration design, master data architecture, and interoperability frameworks.

Deep understanding of secure, resilient technology architecture