Security Architect Consultant

Security Architect Consultant

Permanent hybrid variable Birmingham or London

What You’ll Be Doing

As a Security Architect, you will play a key role in designing and delivering secure, scalable, and compliant architectures for our clients, with a particular focus on Google Cloud Platform (GCP) and emerging Agentic AI systems . Leveraging your strong cloud security and governance expertise, you will:

Security Architecture

• Translate business, data protection and security requirements into practical architectural designs leveraging industry frameworks (NIST, ISO 27001, CIS).
• Design and maintain cloud‑native security architectures , with deep expertise in GCP architecture, security services, and secure workload design .
• Establish secure architectural patterns and standards across cloud platforms, with specific focus on GCP IAM , VPC Service Controls , Cloud Armor , Confidential Computing , and secure workload segmentation .
• Develop security design documentation, diagrams, and rationale aligned with business and compliance requirements.
• Apply risk‑based and threat‑based approaches to recommend secure and proportionate solutions.

Agentic AI & LLM Security Architecture

You will be responsible for shaping security controls around emerging AI ecosystems, including:

• Designing security architectures for agent‑based AI systems , including orchestration frameworks, tool‑use agents, and multi‑agent workflows.
• Implementing AI/LLM security controls across:
• Model security (input/output filtering, model guardrails)
• Prompt security, adversarial prompt defense, prompt isolation
• API & orchestration security, including secure agent tool use
• Data security for vector stores, embeddings, and retrieval services
• Performing AI‑specific threat modelling , including:
• Model extraction & poisoning
• Hallucination‑driven risk
• Sensitive data leakage
• Toxic output & jailbreak attempts
• Advising on secure integration of AI with cloud environments, focusing on compliant, privacy‑aware design.

Risk & Threat Management

• Conduct comprehensive risk assessments and threat modelling for cloud and AI systems.
• Support incident response, including issues involving AI‑driven systems and automated agents.
• Provide actionable mitigation strategies for cloud and AI threats.

Stakeholder Engagement & Technical Leadership

• Provide expert guidance to clients, presenting complex cloud and AI security concepts to technical and non‑technical partners.
• Mentor teams on secure cloud design, AI security, and modern architecture practices.
• Participate in pre‑sales and contribute to delivery collateral.

Security Policy, Standards & Governance

• Develop and implement cloud and AI security policies and standards.
• Support compliance assessments and audits, including cloud‑specific controls and emerging AI regulatory frameworks.
• Ensure alignment to governance standards such as ISO 27001, NIST 800‑53/CSF, NIS2, DORA, and industry cloud security benchmarks.

Technology Evaluation & Continuous Improvement

• Conduct cloud and AI security architecture reviews, including:
• Cloud configuration reviews
• GCP security posture assessments
• AI pipeline hardening
• Evaluate and recommend security technologies for cloud, AI, identity, and data protection.
• Stay up to date with new threats, especially in LLM, agentic AI, and GCP contexts.

What Experience You’ll Bring

Required Core Profile

• Security‑first mindset — this role is primarily for a Security Architect , not a general cloud architect.
• 5+ year’s experience in information security, cloud security and architecture roles.
• Strong knowledge of security governance, risk and compliance frameworks (ISO 27001, NIST CSF/800‑53, NIS2, DORA).
• Strong communication skills and ability to work with senior stakeholders.
• Experience mentoring teams or influencing security decisions.

Required Technical Skills

Google Cloud Platform (GCP)

• Cloud‑native architecture design (GCP‑focused).
• Deep hands‑on experience with GCP security services and GCP security best practices.
• Experience architecting secure multi‑project setups and identity boundaries.

Agentic AI Security

• Experience designing security for agent‑based AI systems and LLM‑integrated applications.
• Hands‑on experience with AI/LLM security controls (prompt security, model governance, secure APIs, orchestration security).
• AI‑specific threat modelling expertise.

Cloud & Security Architecture

• Strong cloud security background across AWS/Azure/GCP.
• Experience in secure design of:
• IAM
• Zero Trust
• Network segmentation
• Data protection and encryption
• Application and API security
• Knowledge of SIEM, IAM, CASB, container/Kubernetes security.
• Experience in Vibe coding, as well as technologies experience similar to Openclaw and Ollama

Certifications

• One or more of: CISA, CRISC, CISM, CISSP (required).

Other Requirements

• Eligible to obtain UK SC clearance.
• Right to work in the UK.