Technical Architect - Security & Access Control

Location: UK/Hybrid
Clearance: SC Eligible
Sector: Public Sector/Justice/Regulated Environments

Overview

We are looking for an experienced Technical Architect with strong security and authorisation expertise to support complex, high-risk public sector systems handling sensitive and legally protected data.

This role focuses on access control, data visibility and architectural assurance, going well beyond standard IAM implementations.

Key Responsibilities

• Own and assure security and access-control architecture across distributed systems.

• Design and govern authorisation models separating identity, role, entitlement, association and decision logic.

• Define boundaries between policy/rule engines and hard system constraints.

• Architect secure event-driven and CQRS systems, including separate controls for command and query paths.

• Prevent data leakage via search, aggregation, metadata and analytics.

• Design immutable audit trails and traceable access-decision logging.

• Embed data-loss prevention into application and data architectures.

• Lead threat modelling and abuse-case analysis.

• Act as an architectural assurance authority, challenging teams and suppliers where required.

Essential Experience

• Technical or Security Architect experience in regulated public sector environments.

• Deep understanding of authorisation and access-control architecture.

• Experience with event-driven, distributed or data-intensive platforms.

• Strong stakeholder engagement and assurance skills.

• Comfortable working with sensitive or legally restricted data.

Nice to Have

• Justice or law-enforcement domain experience.

• Exposure to data platforms, analytics or AI-enabled systems.

• Experience responding to security incidents or pen-test findings.