Security Architect (OT, IT, Network and Physical)
Expleo GroupBristol, England, United Kingdom
Added 6 Aug · still live
Not disclosed
Salary
Not disclosed by employer
£48,500
Going rate
Skilled Worker going rate
This role may qualify for a Skilled Worker visa
SOC 2135 is an eligible occupation, but we classified this role with low confidence (54% match). If the code is right — and Expleo Group is a licensed sponsor — it should qualify, but double-check the occupation eligibility rules against the actual role.
About the role
Expleo is a trusted partner for end-to-end, integrated engineering, quality services, and management consulting for digital transformation. We help businesses harness technological change to successfully deliver innovation, improve resilience and support secure, regulated and operationally critical environments.
As part of the Expleo UK Cybersecurity Practice, you will define and ensure the security architecture for a major UK defence maritime programme, supporting an autonomous surface vessel capability that is being matured towards a whole-ship system design review.
This is a hands-on architecture role for an engineer who is comfortable designing across operational technology, IT, networks, and physical security, and who can serve as a design lead to naval architects, systems engineers, a digital system integrator, and subsystem owners. Because the platform is designed to operate crewless, the architecture must be fail-safe under compromise and maintain a defined minimum-risk state upon loss of the remote command-and-control link.
You will own the security architecture and the asset baseline that underpins it, working to the Security Management Plan set by the Secure by Design lead and providing architectural evidence to support formal design review.
The role requires strong secure-by-design architectural skills, deep IT and OT understanding, and the ability to translate risk and consequences into segmentation, controls, and defensible design decisions.
Responsibilities
As part of the Expleo UK Cybersecurity Practice, you will define and ensure the security architecture for a major UK defence maritime programme, supporting an autonomous surface vessel capability that is being matured towards a whole-ship system design review.
This is a hands-on architecture role for an engineer who is comfortable designing across operational technology, IT, networks, and physical security, and who can serve as a design lead to naval architects, systems engineers, a digital system integrator, and subsystem owners. Because the platform is designed to operate crewless, the architecture must be fail-safe under compromise and maintain a defined minimum-risk state upon loss of the remote command-and-control link.
You will own the security architecture and the asset baseline that underpins it, working to the Security Management Plan set by the Secure by Design lead and providing architectural evidence to support formal design review.
The role requires strong secure-by-design architectural skills, deep IT and OT understanding, and the ability to translate risk and consequences into segmentation, controls, and defensible design decisions.
Responsibilities
- Develop the security architecture for OT and IT in coordination with the digital system integrator and sub-system owners, and produce the preliminary security architecture design.
- Partition the platform into zones and conduits in accordance with IEC 62443, setting target security levels based on safety and mission consequences.
- Review the network architecture and communications security, and provide advice, including on the resilience of remote command-and-control links and of position, navigation, and timing.
- Relevant education or industry-recognised certifications in security architecture, cybersecurity, secure engineering, operational technology security or a related discipline.
- Suitable qualifications may include BSc, MSc, CISSP, CISM, CRISC, CCP, ISA/IEC 62443 (Fundamentals Specialist, Risk Assessment Specialist, Design Specialist or Expert), SABSA, TOGAF, CCNP, OSCP, ISO 27001 Lead Implementer/Lead Auditor or equivalent professional experience.
- Demonstrable application of IEC 62443, including zones and conduits, target security levels, and 62443-3-2 style risk assessment.
- Strong understanding of secure configuration baselines, hardening, identity and access management and privileged access for OT environments.
- Understanding of secure industrial and platform communications, including relevant protocols, cryptographic protection and public key infrastructure.
- Ability to translate risk and consequence into proportionate architectural controls, and to defend those decisions in technical forums.
- Ability to work across engineering, architecture, platform, IT, OT, assurance and supply chain teams.
- Strong written and verbal communication skills, with the ability to produce precise technical design material.
- TEMPEST awareness, particularly as it relates to defence standards and secure design.
- Proven experience as a security architect, OT security architect, or secure engineering specialist on complex technical programmes.
- Experience supporting defence, maritime, naval, energy, rail, manufacturing or other critical national infrastructure environments.
- Experience developing enterprise or platform OT security reference architectures.
- Experience of multi-site or multi-system IT and OT segmentation programmes.
- Experience with asset discovery and inventory tooling, and with passive-first approaches in sensitive operational environments.
- Experience supporting factory acceptance testing, site acceptance testing, integration testing or equivalent technical validation from a security perspective.
- Experience working alongside system integrators and sub-system suppliers to land architectural requirements.
- Have the right to work in the UK.
- Hold, or be eligible to obtain, UK Security Check (SC) clearance. Clearance is a mandatory requirement for this programme, and applicants must meet the UK residency criteria for security clearance.
- Collaborative working environment – we stand shoulder to shoulder with our clients and our peers through good times and challenges
- We empower all passionate technology loving professionals by allowing them to expand their skills and take part in inspiring projects
- Expleo Academy - enables you to acquire and develop the right skills by delivering a suite of accredited training courses
- Competitive company benefits
- Always working as one team, our people are not afraid to think big and challenge the status quo
- As a Disability Confident Committed Employer we have committed to:
- Ensure our recruitment process is inclusive and accessible
- Communicating and promoting vacancies
- Offering an interview to disabled people who meet the minimum criteria for the job
- Anticipating and providing reasonable adjustments as required
- Supporting any existing employee who acquires a disability or long term health condition, enabling them to stay in work at least one activity that will make a difference for disabled people
We treat everyone fairly and equitably across the organisation, including providing any additional support and adjustments needed for everyone to thrive
This description is the source posting as it read when we added it. We are not affiliated with Expleo Group, so check their own site for the current details.
Where this offer sits in the market
SOC 2135 · UK · ONS ASHE 2025 · ~26k in sampleP25 £43kP75 £72k
£32kmedian £55kgoing rate £49k£72k
Similar sponsored roles
See all jobsNo close matches live right now.
Browse more sponsored jobs at Expleo GroupAbout sponsorship for this role
Does this job guarantee visa sponsorship?
Not necessarily. Expleo Group holds a sponsor licence, but sponsorship for a specific hire is always the employer's decision. Be upfront in your application that you'll require it.
What salary is needed for this role to be eligible?
The offer must clear both the general threshold and the SOC 2135 going rate of £48,500. New-entrant and shortage discounts can lower it.