Security Architect

Intelance is appointing a Security Architect as a contract associate for the definition phase of a major UK enterprise technology programme.

You will provide a focused security review of the proposed integration approach and work with Intelance's Chief Enterprise Architect, Lead Integration Architect and Oracle Technical Architect.

The work will set the security requirements for how systems, APIs, files, identities and sensitive data connect.

The expected commitment is about 5 days across an 8 to 10 week period.

Delivery will be mainly remote, with limited planned travel where needed.

Tasks Review the current security controls affecting integrations, Oracle, bespoke applications and external connections.

Define security requirements for APIs, messaging, file transfer and service accounts.

Set identity, access, authentication, authorisation and privileged access requirements.

Define encryption, key and secret management requirements.

Define logging, monitoring, alerting and audit requirements.

Review network boundaries and data flows for security risks.

Identify the controls required before a connection can go live.

Provide security questions and scoring criteria for platform and supplier selection.

Rank security risks and recommend practical treatment.

Produce a concise security architecture review and requirements set.

Requirements At least 8 years of security architecture experience.

Strong recent experience designing security for APIs and enterprise integrations.

Strong knowledge of identity and access, service accounts, secrets, encryption, API gateways, network separation, logging and monitoring.

Experience working across legacy systems and modern integration platforms.

Able to run threat modelling and turn risks into clear technical requirements.

Able to explain security decisions clearly to non technical leaders.

Clear written and spoken English.

Based in the United Kingdom, with the right to work in the United Kingdom.

Available for about 5 days across an 8 to 10 week period.

Experience with Oracle or ERP estates is useful.

Experience in manufacturing, distribution or supply chain businesses is also useful.

Experience with NCSC guidance or ISO 27001 environments is useful.